hbajae Privacy Policy

1.1 hbajae collects personal data through several channels: directly from you when you register, deposit, withdraw, or contact support; automatically when you use the platform via cookies and technical logs; and from third-party verification partners when identity checks are performed. The categories of data we collect are as follows:

1.2 hbajae does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health records unless expressly required to satisfy a specific legal obligation. Where such data is required (for example, medical documentation in connection with a responsible gaming self-exclusion request), it is handled with heightened care and stored separately from general account data.

2.1 hbajae processes your personal data for the following purposes, each of which is grounded in a legitimate basis for processing:

• Account management: creating and maintaining your hbajae account, authenticating your identity at login, and managing your profile settings.
• Service delivery: processing deposits and withdrawals through bKash, Nagad, Rocket, Upay, and connected bank accounts; settling bets and game outcomes; applying bonus credits and managing wagering requirements.
• Identity verification (KYC): verifying that you are who you say you are, that you meet the 21+ age requirement, and that your payment accounts are registered in your own name — as required by our platform policies and applicable compliance obligations.
• Fraud prevention and platform integrity: detecting duplicate accounts, identifying suspicious transaction patterns, investigating potential match-fixing or bonus abuse, and protecting other players from harm.
• Responsible gaming: monitoring gameplay patterns for signs of problem gambling, enforcing deposit limits and self-exclusion requests, and sending responsible gaming reminders where appropriate.
• Customer support: responding to enquiries, resolving disputes, and communicating account status updates to registered players.
• Platform improvement: analysing aggregated, anonymised usage data to improve navigation, game selection, performance, and the overall user experience on hbajae.
• Legal and regulatory compliance: retaining transaction and identity records for the period required by applicable law; cooperating with lawful requests from competent authorities.

2.2 hbajae does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated systems flag an account for investigation (for example, due to suspected fraud), a member of the hbajae compliance team reviews the case before any action is taken.

2.3 hbajae may send you promotional communications about bonuses, seasonal offers, and new games by email or SMS, provided you have not opted out of such communications. You may withdraw your consent to receive marketing messages at any time by contacting [email protected] or by using the unsubscribe mechanism included in each marketing email.

3.1 hbajae uses cookies and similar tracking technologies to deliver and improve the platform. Cookies are small text files placed on your device by your browser when you visit hbajae.app. They allow the platform to recognise returning visitors, maintain session state, and collect analytics data.

3.2 The following categories of cookies are used on hbajae:

• Strictly necessary cookies: required for the platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that prevent cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: remember your preferences such as language settings, currency display, and recently visited game categories. Disabling these cookies means certain personalisation features will not be available.
• Analytics cookies: collect anonymised data about how players use hbajae — which pages are visited most frequently, how long sessions last, and what navigation paths are taken. This data is used exclusively to improve the platform and is not linked back to individual identities.
• Security and fraud detection cookies: help hbajae identify unusual access patterns, detect device-switching behaviour associated with account takeover attempts, and verify that the device accessing the account is consistent with prior sessions.

3.3 You can control or disable cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into or using hbajae. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

3.4 hbajae does not use third-party advertising cookies or retargeting pixels from external ad networks. The platform does not track your browsing activity on other websites.

4.1 hbajae does not sell, rent, or trade personal data. We share your information only in the specific, limited circumstances described below:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other payment partners receive the minimum data necessary to process your deposit or withdrawal transaction — typically your wallet number or bank account reference and the transaction amount.
• Identity verification services: third-party KYC providers may receive copies of your identity documents and personal details in order to verify your identity and age, as required by our platform policies. These providers are contractually bound to handle your data securely and to use it only for verification purposes.
• Game providers: Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, Evolution Gaming, and other game studios may receive a session token and anonymised player identifier sufficient to initialise a game session. Game providers do not receive your full name, contact details, or financial information.
• Legal and regulatory authorities: where required by applicable law, a valid court order, or a lawful request from a competent authority, hbajae may disclose personal data to government bodies, law enforcement agencies, or regulatory bodies. hbajae will notify you of such disclosure where legally permitted to do so.
• Business operations: IT infrastructure, hosting, and cybersecurity service providers may have access to data held on systems they operate on hbajae's behalf, under strict data processing agreements that prohibit independent use of the data.

4.2 All third parties with whom hbajae shares personal data are required to implement appropriate technical and organisational security measures commensurate with the sensitivity of the data shared. hbajae conducts periodic reviews of its data-sharing arrangements to ensure continued compliance with this Policy.

5.1 hbajae implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption across all pages of hbajae.app, ensuring that data in transit is protected;
• Encryption of sensitive data fields (including identity document references and financial account identifiers) at rest in our databases;
• Role-based access controls ensuring that personal data is accessible only to hbajae team members who require it to perform their job functions;
• Multi-factor authentication requirements for internal systems used to access player account data;
• Regular security audits and vulnerability assessments of platform infrastructure;
• Incident response procedures to detect, contain, and report data security incidents within required timeframes.

5.2 While hbajae takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for keeping your account login credentials confidential. hbajae will never ask for your password via email, live chat, phone, or any other channel. If you receive any such request, treat it as a phishing attempt and report it to support immediately.

5.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, hbajae will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

6.1 As a player on hbajae, you hold the following rights with respect to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and include your registered username:

• Right of access: you may request a copy of the personal data hbajae holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to rectification: if any personal data held by hbajae is inaccurate or incomplete, you may request that it be corrected. For certain data types (such as your registered name), supporting documentation may be required.
• Right to erasure: you may request the deletion of your personal data. This right is subject to certain limitations — for example, hbajae is required to retain transaction records and identity verification data for a defined period after account closure for compliance purposes. Where deletion is not possible in full, hbajae will explain why and will delete all data that can lawfully be removed.
• Right to restrict processing: you may request that hbajae temporarily suspend the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over deletion.
• Right to data portability: you may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible.
• Right to withdraw consent: where hbajae processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: you may object to the processing of your personal data for direct marketing purposes at any time. hbajae will cease such processing immediately upon receipt of a valid objection.

6.2 hbajae will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or voluminous, this period may be extended by a further 60 days, in which case hbajae will notify you of the extension and the reason for it within the initial 30-day period.

6.3 hbajae will not charge a fee for processing data rights requests unless a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied or the request may be refused. hbajae will explain its reasoning in any such case.

7.1 hbajae retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to satisfy applicable legal, regulatory, or contractual obligations. The following retention guidelines apply:

7.2 When personal data reaches the end of its applicable retention period and there is no longer a legal basis for retaining it, hbajae will securely delete or permanently anonymise it so that it can no longer be associated with any individual.

8.1 hbajae is strictly an adult platform for players aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires applicants to confirm their date of birth, and identity verification is used to validate age where there is any reason for doubt.

8.2 If hbajae becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be closed, and any funds held in the account will be dealt with in accordance with our underage access policy as described in the Terms and Conditions.

8.3 Parents and guardians who believe that a minor in their household has accessed hbajae should contact [email protected] immediately. hbajae will investigate and take appropriate action, including account closure and data deletion, as quickly as possible.

9.1 hbajae reserves the right to update this Privacy Policy at any time to reflect changes in the platform's data practices, applicable law, or operational requirements. The effective date shown at the top of this document will be updated whenever a new version is published.

9.2 For material changes — that is, changes that meaningfully affect how your personal data is collected, used, or shared — hbajae will provide at least 7 days' advance notice to registered players via the email address or mobile number associated with their account. Continued use of hbajae following notification of an updated Policy constitutes acceptance of the revised version.

9.3 We encourage you to review this Policy periodically. The most current version is always available at hbajae.app/privacy-policy. Archived versions of previous policies are available upon request by contacting support.

10.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which hbajae handles your personal data, please contact our support team. All privacy-related enquiries are handled with full confidentiality.

10.2 Contact: [email protected]. Please use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure your message is routed to the appropriate team member. hbajae aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 10 business days.

10.3 For responsible gaming concerns that involve personal data — such as requests to delete gameplay history or to apply a self-exclusion — please identify the nature of your request clearly in your message so that it can be handled with the appropriate priority and sensitivity.