hbaij Privacy
Policy

1. Information We Collect

1.1 Information You Provide Directly

When you register an account with hbaij, make a deposit or withdrawal, contact our support team, or otherwise interact with the platform, you may provide us with the following categories of personal information:

• Identity Data: Full legal name, date of birth, gender, and nationality as presented on your government-issued identification document (National ID card, passport, or driver's licence).
• Contact Data: Email address, mobile phone number, and residential address including district, city (e.g., Dhaka, Chittagong, Sylhet, Khulna), and postal code.
• Financial Data: Payment method details required for deposit and withdrawal processing, including registered mobile wallet numbers (bKash, Nagad, Rocket, Upay) and bank account details where applicable. Full card numbers are never stored by hbaij — card transactions are handled exclusively by our certified payment processors.
• Verification Documents: Copies of government-issued photo ID, proof of address documents, and proof of payment method ownership submitted as part of our KYC verification process.
• Communications Data: Records of any messages, emails, or live chat conversations exchanged between you and the hbaij support team.

1.2 Information Collected Automatically

When you access and use the hbaij platform, we automatically collect certain technical and behavioural data including:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages and sections of the platform you visit, games you play, betting history, session duration, click paths, and feature interactions.
• Location Data: General geographic location derived from your IP address. We do not collect precise GPS location data.
• Log Data: Server access logs including timestamps, request types, response codes, and referring URLs.

1.3 Data We Collect from Third Parties

hbaij may receive personal data about you from the following third-party sources in limited circumstances:

• Payment processors and mobile wallet providers (bKash, Nagad, Rocket) who confirm transaction status and account ownership details.
• Identity verification and fraud prevention service providers who assist us in completing KYC checks.
• Game software providers who supply technical data necessary for resolving disputes about game outcomes or technical malfunctions.

2. How We Use Your Data

hbaij processes your personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which we use each category of data and the legal basis for that processing:

Purpose	Data Categories Used	Legal Basis
Account registration and management	Identity, Contact	Contractual necessity
Identity verification (KYC)	Identity, Verification Documents, Financial	Legal obligation; contractual necessity
Processing deposits and withdrawals	Financial, Identity	Contractual necessity
Fraud prevention and AML monitoring	Identity, Financial, Usage, Technical	Legal obligation; legitimate interests
Customer support communications	Identity, Contact, Communications	Contractual necessity; legitimate interests
Platform security and integrity	Technical, Usage, Log Data	Legitimate interests
Responsible gaming monitoring	Usage, Identity, Financial	Legal obligation; legitimate interests
Service improvement and analytics	Usage, Technical (anonymised)	Legitimate interests

hbaij does not use your personal data for automated individual decision-making that produces legal or similarly significant effects on you without human review. Where profiling is used for responsible gaming purposes, this is subject to human oversight and you may request a review of any outcome that affects your account.

3. Sharing & Disclosure

3.1 Service Providers

hbaij shares personal data with carefully selected third-party service providers who process data on our behalf solely to provide services to the platform. These providers include payment processors, identity verification services, cloud infrastructure providers, fraud detection services, and customer support tooling vendors. All such providers are bound by contractual data processing agreements that require them to maintain data confidentiality and implement appropriate security measures.

3.2 Game Software Providers

When you play games on the hbaij platform, limited technical data (such as a pseudonymous player identifier and session data) is shared with the relevant game software provider (for example, Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) for the purpose of delivering and auditing game outcomes. These providers process data as independent data controllers under their own privacy policies.

3.3 Legal and Regulatory Disclosure

hbaij may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction. We will, where legally permissible, notify you of such a disclosure request before complying.

3.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of hbaij's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms via the email address registered to your account.

3.5 What We Do Not Do

hbaij does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We do not share your data with advertising networks for the purpose of serving targeted advertisements on third-party websites or applications.

4. Cookies & Tracking Technologies

4.1 What Are Cookies

Cookies are small text files that are stored on your device by your web browser when you visit a website. hbaij uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your login session, and understand how users interact with the site.

4.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These cookies manage your login session, remember your preferences, and protect against cross-site request forgery. They cannot be disabled without breaking core platform functionality.
• Analytics Cookies: Used to collect anonymised data about how users navigate the platform, which pages are most visited, and where errors occur. This data is used solely to improve the platform experience and is not linked to identifiable individuals.
• Security Cookies: Used by our fraud detection systems to identify unusual login patterns, detect bot traffic, and prevent unauthorised account access.

4.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the hbaij platform. Instructions for managing cookies in commonly used browsers are available in the help documentation of your respective browser provider.

5. Data Retention

hbaij retains your personal data for as long as is necessary to fulfil the purposes outlined in this Policy, or as required by applicable law and compliance obligations. The following retention periods apply:

• Active account data: Retained for the duration of your active account relationship with hbaij, plus a minimum of five years following account closure to satisfy anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five years following account closure or the last transaction date, whichever is later.
• Transaction and betting records: Retained for a minimum of five years following each transaction for regulatory and dispute resolution purposes.
• Customer support communications: Retained for three years following the resolution of the relevant support case.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked to any identifiable individual.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

6. Security Measures

hbaij takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for all sensitive personal data and KYC documentation stored on our infrastructure.
• Access controls: Personal data is accessible only to hbaij staff and contractors who require it for the performance of their duties, and only with appropriate authorisation.
• Multi-factor authentication for all hbaij staff accessing systems that contain personal data.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Incident response procedures for detecting, containing, and reporting personal data breaches in a timely manner.

While hbaij employs industry-standard security practices, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying hbaij immediately if you suspect any unauthorised access to your account.

7. Your Privacy Rights

As a user of the hbaij platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at the details provided in Section 8 of this Policy:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You may request a copy of the personal data you have provided to us in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing of your personal data for purposes based on legitimate interests, including profiling for responsible gaming assessments, subject to our ability to demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

hbaij will respond to all valid data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days with prior notification. We may ask you to verify your identity before processing a request to protect against fraudulent data access attempts.

8. Contact & Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hbaij handles your personal data, please contact our data protection team using the following details:

• Email: [email protected] — please include "Privacy Request" in the subject line.
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 30 calendar days.
• Support Hours: 24/7 — Bangladesh Standard Time (UTC+6).

hbaij is committed to working with you directly to resolve any data privacy concerns. If you feel your concern has not been addressed satisfactorily, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

hbaij reserves the right to update this Privacy Policy from time to time to reflect changes in legal requirements, platform functionality, or data processing practices. The revised Policy will be published at hbaij.net/privacy-policy with an updated effective date. We recommend reviewing this page periodically to stay informed of how we protect your data. Continued use of the platform following publication of an updated Policy constitutes your acceptance of the revised terms.