Privacy Policy — hbajee apk

Data We Collect

hbajee apk collects personal data that is necessary to deliver, maintain, and improve our services, and to comply with applicable legal and financial obligations. We do not collect data beyond what is reasonably required for these purposes. The categories of data we collect are described below.

Registration & Identity Data

• Full legal name as it appears on government-issued identification.
• Date of birth, used to verify that you meet the minimum age requirement of 18 years.
• Bangladesh mobile number, used for account verification, SMS OTP, and support communication.
• Email address, used for account communications, promotional messages (where consented), and recovery.
• Residential city or district within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).
• Username and encrypted password credentials.

Identity Verification (KYC) Data

• Copy of Bangladesh National ID Card (NID), passport, or birth certificate submitted for age and identity verification.
• Proof of payment method ownership (e.g., screenshot or confirmation of bKash, Nagad, Rocket, or Upay account registered in your name).
• Selfie or liveness-check image where enhanced verification is required for high-value withdrawal requests.

Financial & Transaction Data

• Deposit and withdrawal amounts, timestamps, and transaction reference numbers.
• Payment method identifiers (e.g., the last four digits of a registered card, or the mobile number associated with a bKash/Nagad account) — full card numbers are never stored on our servers.
• Account balance history, bonus credit history, and wagering records necessary for bonus compliance and dispute resolution.

Behavioural & Technical Data

• IP address, device type, operating system, browser type, and screen resolution collected automatically when you access the platform.
• Session duration, pages visited, games launched, bets placed, and navigation patterns — collected via first-party analytics to improve platform performance.
• Geolocation data (country and region level only) derived from IP address — we do not collect precise GPS coordinates.
• Cookie identifiers and similar tracking technologies as described in our Cookies section below.

Communication Data

• Records of all support interactions, including live chat transcripts and email correspondence with our customer service team.
• Survey responses and feedback submissions where you voluntarily participate.
• Promotional communication preferences, including whether you have opted in or out of marketing emails and SMS notifications.

How We Use Your Data

hbajee apk processes your personal data only for clearly defined, legitimate purposes. We do not sell your data to third parties for their own marketing use. The following table summarises our primary processing activities and the legal basis for each:

Where we rely on your consent as the legal basis for processing (for example, sending you promotional emails about new slot releases, cricket betting odds updates, or seasonal Eid and Pohela Boishakh bonus offers), you may withdraw that consent at any time by updating your communication preferences within your account settings or by contacting us directly at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing conducted before the withdrawal.

We use automated profiling to detect patterns of problem gambling behaviour. This includes monitoring for indicators such as rapidly increasing deposit frequency, extended session durations without breaks, and repeated attempts to reverse self-exclusion requests. Where such patterns are detected, our responsible gaming team may contact you proactively. This processing is carried out in the interest of player welfare and operates as a safeguard, not a commercial tool.

Data Sharing & Disclosure

hbajee apk does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the specified purpose.

Payment Processing Partners

To process your deposits and withdrawals, we share the minimum necessary transaction data with our certified payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each partner operates under its own privacy policy and is contractually bound to process your data only for the stated payment purpose.

Game Software Providers

To deliver casino and sports betting games on our platform, we work with licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your player session identifier and game stake data to enable real-time gameplay and RNG certification logging. They are contractually prohibited from using this data for any purpose beyond game delivery and regulatory auditing.

Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies if we are legally required to do so, or if we reasonably believe that disclosure is necessary to prevent or investigate financial crime, fraud, money laundering, or any other unlawful activity. We will notify you of any such disclosure where we are legally permitted to do so.

Service Providers and Technology Partners

We engage third-party service providers to operate specific technical functions of our platform, including cloud hosting infrastructure, cybersecurity monitoring, and platform analytics. All such providers are bound by data processing agreements that restrict their use of your data to the contracted service purpose and prohibit any independent processing, onward transfer, or commercialisation of your data.

Cookies & Tracking Technologies

hbajee apk uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to maintain your authenticated session, and to understand how players use our services so we can improve them. Below is a summary of the types of cookies we use and their purpose.

hbajee apk does not use third-party advertising cookies or cross-site tracking technologies that follow you across other websites. Our analytics are conducted using first-party data only. You can review and manage your cookie preferences at any time by accessing the Privacy Settings section within your account dashboard. Please note that disabling functional or analytics cookies may affect your experience of certain platform features.

When you first access our platform, we display a cookie notice that allows you to acknowledge our cookie practices. Continued use of the platform after dismissing this notice constitutes acceptance of strictly necessary and security cookies. For functional and analytics cookies, we seek your positive opt-in consent before activating them on your device.

Data Retention

hbajee apk retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or for as long as we are legally required to retain it. The following retention periods apply as a general framework:

• Active account data — retained for the lifetime of your active account plus a standard post-closure period of 7 years to satisfy anti-money laundering record-keeping obligations.
• KYC verification documents — retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later, as required by financial compliance standards.
• Transaction records — retained for a minimum of 7 years following each transaction for financial audit and dispute resolution purposes.
• Support communications — retained for 3 years following the close of the support interaction for quality assurance and dispute escalation purposes.
• Behavioural and analytics data — retained in anonymised, aggregated form for platform improvement purposes; individual-level session data is purged within 13 months.
• Marketing consent records — retained for the duration of your account plus 3 years after account closure to demonstrate compliance with consent-based marketing obligations.

When your data is no longer required for any of the above purposes, it is securely deleted or anonymised using industry-standard data destruction methods. Where complete deletion is not immediately possible due to backup retention cycles, the data is isolated and protected from further processing until it can be permanently purged.

Security Measures

hbajee apk employs a layered, defence-in-depth approach to the security of your personal and financial data. We continually review and update our security practices to address emerging threats. Our core security measures include the following:

• 256-bit TLS/SSL Encryption: All data transmitted between your device and our platform is encrypted in transit using 256-bit TLS encryption, making interception by third parties computationally infeasible.
• Encrypted Data at Rest: Sensitive personal data stored in our databases — including identity documents and payment identifiers — is encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are never stored in plaintext. We apply a strong cryptographic hashing algorithm with per-user salt values, meaning that even in the event of a database breach, your password cannot be recovered in its original form.
• Two-Factor Authentication (2FA): SMS OTP-based two-factor authentication is available for all player accounts. We strongly encourage all players to enable 2FA to protect against unauthorised login attempts.
• Access Controls: Access to player data within our organisation is granted on a strict need-to-know basis. Staff who do not require access to personal data for their role are not granted it. All internal data access is logged and audited.
• Intrusion Detection and Monitoring: Our infrastructure is monitored around the clock by automated intrusion detection systems that flag and quarantine anomalous access patterns in real time.
• Penetration Testing: We commission periodic third-party penetration testing of our platform to proactively identify and remediate security vulnerabilities before they can be exploited.

Your Rights

As a player on the hbajee apk platform, you hold a number of rights with respect to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered account details. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how and why we process it. We will provide this in a structured, commonly used, and machine-readable format on request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update many details directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected. Please note that this right is subject to our legal retention obligations — for example, we are required to retain transaction records for anti-money laundering compliance even after account closure.
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and we are considering that objection.
• Right to Object: Where we process your data on the basis of legitimate interests (including profiling for responsible gaming monitoring or analytics), you have the right to object. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where we process your data on the basis of your consent or for the performance of a contract, and the processing is carried out by automated means, you have the right to receive your data in a portable format and to request that it be transferred to another controller where technically feasible.
• Right to Withdraw Consent: Where we rely on your consent to process your data (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

We will not charge a fee for handling your data rights requests unless they are manifestly unfounded, excessive, or repetitive — in which case we may charge a reasonable administrative fee or decline to respond, and we will explain our reasons for doing so.

Policy Updates & Contact

hbajee apk reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or developments in our platform. When we make material changes to this policy, we will notify registered players via their registered email address at least 14 days before the changes take effect. We will also update the "Effective Date" at the top of this page.

Your continued use of the hbajee apk platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you may close your account by contacting our support team before the effective date.

For any questions, concerns, or complaints about this Privacy Policy or about how hbajee apk handles your personal data, please contact our Data Protection team using the details below. We treat all privacy inquiries seriously and aim to respond within 5 business days (Bangladesh Standard Time, UTC+6).