Privacy Policy — hbbaje

1 Introduction

hbbaje is committed to protecting the privacy and personal data of all players and visitors to the platform. This Policy is intended to provide clear, honest information about what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This Policy applies to all personal data collected through the hbbaje website (hbbaje.app), including data submitted during account registration, during gameplay, through deposit and withdrawal transactions, through customer support interactions, and through the use of our website's cookies and similar tracking technologies. It applies regardless of whether you access hbbaje from a desktop browser or a mobile device.

We encourage you to read this Policy in full before using the hbbaje platform. If you have any questions about how we handle your personal data, please contact us at [email protected].

2 Data Controller

For the purposes of this Privacy Policy, hbbaje acts as the data controller in respect of the personal data it collects from players and visitors. As data controller, hbbaje determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection obligations.

All enquiries relating to data protection and the exercise of your rights under this Policy should be directed to our support team at [email protected]. We aim to respond to all data-related enquiries within 10 business days of receipt.

3 Data We Collect

3.1 Identity and Contact Data

When you register an account with hbbaje, we collect personal identification information necessary to create and manage your account and to comply with our Know Your Customer ("KYC") obligations. This includes:

• Full legal name;
• Date of birth (to verify you are aged 18 or above);
• Residential address;
• Email address;
• Mobile phone number;
• National Identity Card (NID) number or other government-issued identification document details;
• Photographs or scanned copies of identity documents submitted for verification.

3.2 Financial Data

To facilitate deposits and withdrawals in Bangladeshi Taka (৳), hbbaje collects financial information including:

• bKash, Nagad, Rocket, or Upay mobile wallet numbers used for transactions;
• Bank account details where bank transfers are used (e.g., Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank);
• Transaction history including deposit amounts, withdrawal amounts, and timestamps;
• Details of any payment method used to fund your hbbaje account.

3.3 Technical and Usage Data

When you access hbbaje, we automatically collect certain technical information about your device and browsing behaviour, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited on the hbbaje platform and time spent on each page;
• Game sessions played, bet amounts, and game outcomes;
• Referring URLs and exit pages;
• Session duration and frequency of visits.

3.4 Communications Data

If you contact hbbaje customer support, we retain records of those communications, including emails, chat transcripts, and any attachments you submit. This data helps us resolve disputes, improve our support services, and maintain a record of interactions for quality assurance purposes.

4 How We Collect Data

hbbaje collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting customer support.
• Automated collection: Technical and usage data collected automatically as you interact with the hbbaje platform via cookies, web server logs, and analytics tools.
• Third-party sources: Identity verification and fraud-screening providers may supply supplementary data to help hbbaje confirm your identity and protect against fraudulent activity.
• Payment providers: Transaction data received from bKash, Nagad, Rocket, Upay, and banking partners when you initiate deposit or withdrawal operations.

5 Legal Basis for Processing

hbbaje processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the gaming services you have requested — including handling deposits and withdrawals via bKash, Nagad, and Rocket.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including anti-money laundering obligations, Know Your Customer requirements, and age verification obligations (18+ only).
• Legitimate interests: Processing carried out for the purposes of fraud detection, platform security, abuse prevention, and improving the quality of hbbaje's services, where those interests are not overridden by your rights.
• Consent: Where hbbaje relies on your consent — for example, for optional marketing communications — you may withdraw that consent at any time by contacting [email protected] without affecting the lawfulness of processing that took place prior to withdrawal.

6 How We Use Your Data

hbbaje uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your hbbaje account, including processing login requests and enforcing account security measures.
• Payment processing: Facilitating deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, and local bank transfers; verifying payment method ownership; and maintaining transaction records.
• Identity verification: Completing KYC checks to confirm your identity and age in compliance with our legal and operational obligations.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
• Customer support: Responding to enquiries, resolving disputes, and maintaining records of interactions for quality assurance.
• Platform improvement: Analysing usage data to understand how players interact with hbbaje games — including cricket betting, slots, and live casino — in order to improve platform performance and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal campaign updates (such as BPL, T20, and Eid promotions) where you have consented to receive such communications.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and enabling delivery of responsible gaming tools such as deposit limits and self-exclusion.
• Legal compliance: Retaining records as required by applicable laws and responding to lawful requests from regulatory or law enforcement authorities.

7 Data Sharing & Disclosure

7.1 Trusted Service Providers

hbbaje shares personal data with carefully selected third-party service providers who assist in operating the platform. These include payment processors (bKash, Nagad, Rocket, banking partners), identity verification services, game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), IT infrastructure providers, and customer support tools. All such providers are bound by confidentiality agreements and are prohibited from using your data for any purpose beyond the specific service they provide to hbbaje.

7.2 Legal and Regulatory Disclosure

hbbaje may disclose personal data to law enforcement agencies, regulatory authorities, or other third parties where required to do so by law, court order, or other legal process. This includes disclosure in connection with anti-money laundering investigations or suspected criminal activity. hbbaje will notify you of any such disclosure where legally permitted to do so.

7.3 No Sale of Personal Data

hbbaje does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Your personal data is an asset held in trust; it exists to enable us to serve you — not to generate revenue through its transfer to outside parties.

7.4 Business Transfers

In the event that hbbaje undergoes a business reorganisation, merger, or transfer of assets, personal data held by hbbaje may form part of the transferred assets. In such circumstances, hbbaje will ensure that appropriate privacy protections are maintained and will notify affected players before their data is transferred to a new data controller.

8 Data Retention

hbbaje retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Account data: Retained for the duration of your account's active status and for a period of five (5) years following account closure, to comply with anti-money laundering and record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial record-keeping requirements.
• KYC documents: Retained for the period required under applicable identity verification and anti-money laundering legislation, typically five (5) years from the date of verification or account closure.
• Customer support communications: Retained for two (2) years following the resolution of each support interaction, unless the communication relates to a dispute that remains unresolved.
• Marketing consent records: Retained for as long as you maintain an active account or until you withdraw consent, whichever occurs first.

Once the applicable retention period expires, personal data is securely deleted or anonymised in accordance with hbbaje's internal data management procedures.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. hbbaje uses cookies and similar technologies (including web beacons and local storage) to make the platform function correctly, remember your preferences, and gather analytics data about how the site is used.

9.2 Types of Cookies We Use

• Strictly necessary cookies: Required for core platform functionality, including maintaining your login session and enabling page navigation. These cannot be disabled without affecting your ability to use hbbaje.
• Functional cookies: Remember your preferences such as language settings and display options to provide a more personalised experience on return visits.
• Analytics cookies: Collect anonymised data about how visitors use the hbbaje platform, including which pages are visited most frequently and how players navigate between game categories. This data helps us improve platform layout and performance.
• Security cookies: Support fraud detection and account protection measures by identifying unusual patterns of access or interaction.

9.3 Managing Cookies

You may control or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the hbbaje platform. Analytics cookies can be declined without impacting your ability to access games, make deposits, or manage your account. Strictly necessary cookies cannot be disabled while you are actively using the platform.

10 Data Security

hbbaje implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your browser and the hbbaje platform;
• Encrypted storage of sensitive personal data at rest;
• Role-based access controls restricting access to personal data to authorised hbbaje personnel only;
• Regular security assessments and vulnerability testing of platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems holding personal data;
• Incident response procedures to address data security breaches promptly and notify affected players where required by applicable law.

While hbbaje takes all reasonable precautions to secure your data, no method of transmission over the internet or electronic storage is completely infallible. You play an important role in keeping your account secure by maintaining a strong password and not sharing your login credentials with any third party. If you suspect your account has been compromised, contact [email protected] immediately.

11 Your Rights

As a hbbaje player, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data hbbaje holds about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your account. Minor corrections (such as phone number updates) can be made directly via your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to hbbaje's legal retention obligations. Note that certain financial and KYC records must be retained for regulatory compliance and cannot be erased on request.
• Right to restrict processing: You may request that hbbaje limits the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, subject to hbbaje's assessment of whether its legitimate interests override your rights.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact hbbaje at [email protected] with a clear description of your request and sufficient identifying information to allow us to verify your identity. We will respond within 10 business days of receipt of a valid request.

12 Children's Privacy

The hbbaje platform is strictly intended for adults aged 18 years and above. hbbaje does not knowingly collect personal data from individuals under the age of 18. If we become aware that a person under 18 has provided personal data to hbbaje, we will take immediate steps to delete that data and close the associated account. Any winnings generated through an underage account will be forfeited.

If you are a parent or guardian and believe that a minor in your care has registered an account with hbbaje, please contact us immediately at [email protected] so that we may take appropriate action. We take our responsibility to prevent underage gambling seriously and cooperate fully with any request to investigate and remove underage accounts.

13 Changes to This Policy

hbbaje reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data we collect or the purposes for which we use it — hbbaje will provide reasonable advance notice by posting a prominent notice on the platform or by sending an email to the address registered on your account.

The revised Policy will be effective from the date of publication at hbbaje.app/privacy-policy. Your continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should cease using the platform and close your account.

We recommend reviewing this Policy periodically to stay informed about how hbbaje protects your personal data. The effective date at the top of this document will always reflect the date of the most recent revision.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hbbaje handles your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 10 business days of receipt
• Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

For requests relating to the exercise of your data rights (access, rectification, erasure, restriction, or objection), please include "Data Rights Request" in the subject line of your email and provide sufficient detail to allow us to identify your account and process your request efficiently.