hbaja Privacy Policy — Your Data, Your Rights

1. Introduction

hbaja ("we", "us", "our", "the Platform") respects the privacy of every individual who accesses or uses our online casino and sports betting platform. This Privacy Policy ("Policy") describes in detail how hbaja collects, processes, stores, shares, and protects personal data provided by or collected about players, visitors, and other users ("you", "your") in connection with your use of the hbaja website and its associated services.

By registering an account, depositing funds, or continuing to use the hbaja platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the platform immediately and contact us to request account closure.

2. Information We Collect

hbaja collects personal data in several ways: directly from you when you register or transact, automatically when you use the platform, and from third-party service providers involved in delivering our services. The categories of data we collect include:

3. How We Use Your Information

hbaja uses the personal data it collects strictly for the purposes described below. We do not use your data for any purpose that is inconsistent with what is stated in this Policy without first obtaining your explicit consent:

• Account creation, registration, and ongoing account management, including identity verification in compliance with KYC requirements.
• Processing deposits, withdrawals, and all financial transactions on the platform via bKash, Nagad, Rocket, Upay, and partner banking institutions.
• Delivering and personalising game content, promotional offers, and platform features based on your activity, preferences, and account history.
• Detecting and preventing fraud, money laundering, collusion, bonus abuse, and other prohibited activities as defined in the Terms & Conditions.
• Providing customer support, investigating complaints, and resolving account disputes in a fair and timely manner.
• Complying with applicable legal obligations, including anti-money laundering requirements, regulatory reporting, and responding to lawful requests from competent authorities.

4. Legal Basis for Processing

hbaja processes personal data only where a valid legal basis exists. Depending on the specific processing activity, the applicable legal bases are:

• Contractual necessity: Processing required to perform our obligations under the account agreement with you, including account management, payment processing, and game delivery.
• Legal obligation: Processing necessary to comply with applicable laws, including anti-money laundering legislation, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications and non-essential cookies where you have provided clear, affirmative consent. You may withdraw consent at any time by contacting support.

5. Sharing of Personal Data

hbaja does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary to deliver our services or meet our legal obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your deposits and withdrawals.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Ezugi, Spribe, Microgaming, and other licensed game studios — solely to enable game delivery and RNG certification compliance.
• Identity verification and fraud prevention partners: third-party KYC and anti-fraud service providers who assist hbaja in verifying player identities and detecting suspicious activity.
• Regulatory and law enforcement authorities: where hbaja is required by applicable law, court order, or competent regulatory authority to disclose personal data, we will comply with such requirements and, where legally permitted, will notify you of the disclosure.

6. Cookies and Tracking Technologies

hbaja uses cookies and similar tracking technologies to improve platform performance, remember your preferences, and analyse how the site is used. We use three main categories of cookies:

• Essential cookies: necessary for the platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: used to collect aggregate, anonymised information about how users navigate the platform. This data helps us improve the user experience without identifying individual players.
• Preference cookies: used to remember your language settings, display preferences, and other personalisation choices you have made on the platform.

You can control the use of non-essential cookies through your browser settings. However, disabling certain cookies may affect the performance and availability of some platform features. For full details on our cookie usage, please contact our support team.

7. Data Retention

hbaja retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. In practice, this means that account data and transaction records are retained for a minimum period following account closure, as required by financial regulation and anti-money laundering law. The specific retention period applicable to your data will depend on the category of data and the legal requirement driving retention.

When personal data is no longer required, hbaja will securely delete or anonymise it in accordance with our data disposal procedures. If you request the deletion of your account and associated data, we will fulfil that request to the extent permissible under applicable law, and will notify you of any data that must be retained for legal compliance reasons.

8. Data Security

hbaja implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. All data transmissions between your device and the hbaja platform are encrypted using SSL (Secure Socket Layer) technology. Access to personal data within hbaja is restricted on a strict need-to-know basis, and all staff who handle player data receive appropriate data protection training.

While hbaja takes all reasonable precautions to safeguard your data, no internet transmission or electronic storage method is completely secure. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, hbaja will notify affected players without undue delay, in accordance with applicable notification requirements.

9. Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights in respect of your personal data held by hbaja. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within a reasonable timeframe:

• Right of access: You may request a copy of the personal data hbaja holds about you, along with information about how and why it is being processed.
• Right to rectification: If any personal data hbaja holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: In certain circumstances , you may request the deletion of your personal data. This right is subject to hbaja's legal retention obligations and may not apply where processing is necessary for compliance with a legal obligation.
• Right to restriction: You may request that hbaja restricts the processing of your personal data in certain circumstances, for example while a rectification request is being reviewed.
• Right to object: Where processing is based on legitimate interests, you have the right to object to that processing. hbaja will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.

hbaja will not discriminate against you for exercising any of your data rights. All requests will be handled with care, verified appropriately, and responded to in accordance with applicable data protection obligations. There is no charge for submitting a data rights request, though hbaja reserves the right to charge a reasonable fee for manifestly unfounded or excessive requests.

10. Children's Privacy

The hbaja platform is strictly for adults aged 21 and above. hbaja does not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the hbaja platform, please contact us immediately at [email protected] so that we can investigate and act without delay.

11. Third-Party Links and Services

The hbaja platform may contain references to third-party game providers and payment processors. While hbaja takes reasonable care to work only with reputable partners, we are not responsible for the privacy practices of any third party. Once you leave the hbaja platform environment and interact directly with a third-party service, their own privacy policy governs how your data is handled. We encourage you to review the privacy policies of any third-party services you use in connection with your hbaja account.

12. International Data Transfers

hbaja operates primarily to serve players based in Bangladesh. However, some of our technology infrastructure and third-party service providers may be located outside Bangladesh. Where personal data is transferred internationally, hbaja takes appropriate steps to ensure that such transfers are carried out in accordance with applicable data protection requirements and that your data receives an equivalent level of protection to that afforded under applicable Bangladeshi data protection standards.

13. Changes to This Privacy Policy

hbaja reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered players via the email address associated with their account. Your continued use of the hbaja platform following publication of any changes constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed of how we protect your data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hbaja handles your personal data, please contact our support team. We are committed to resolving all privacy-related enquiries promptly and transparently. Our contact email is listed below — please note that this address is for written correspondence only and is not a clickable link.