hbaej Privacy Policy

hbaej ("we", "us", "our") operates the online casino and sports betting platform available at hbaej.io. hbaej is the data controller responsible for the personal data collected from users ("you", "your", "the player") who access or use the platform. We are committed to handling all personal data with respect, care, and in accordance with internationally recognised data protection principles.

This Privacy Policy applies to all personal data collected through the hbaej website, mobile-optimised interface, game lobby, sportsbook, live chat, email correspondence, and any other channel through which you interact with the hbaej platform. It applies to all registered players, visitors, and prospective users located in Bangladesh and elsewhere.

For all privacy-related queries, data access requests, or concerns, you may contact hbaej's data support team at [email protected]. Response times for privacy matters are typically within 5 business days of receipt.

hbaej collects personal data in the following categories. Collection of each category is tied to a specific operational or legal purpose, which is described in Section 4 of this policy.

hbaej does not knowingly collect sensitive categories of personal data such as health or medical information, racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where directly relevant to a responsible gaming or fraud prevention assessment and only where you have provided such information voluntarily.

hbaej collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an account, completing the KYC verification process, making a deposit or withdrawal request, contacting our support team, or completing any form on the platform.
• Automated technical collection: Data collected automatically when you access the platform, including IP address, device identifiers, browser characteristics, and session behaviour, gathered via server logs, cookies, and analytics scripts.
• Payment processors: Transaction confirmation data received from third-party payment providers such as bKash, Nagad, Rocket, and Upay when you make deposits or withdrawal requests. hbaej receives only transaction confirmation references; we do not store full mobile financial account credentials.
• Identity verification partners: Where a third-party KYC verification service is used to validate documents submitted during account verification, relevant identity confirmation signals are shared with hbaej following the verification check.
• Fraud prevention and anti-money laundering services: Risk signals and watchlist screening results from third-party compliance services engaged to prevent fraud, money laundering, and underage access.
• Game providers: Aggregated game performance data provided by third-party game studios to support dispute resolution, technical auditing, and responsible gaming monitoring.

hbaej processes personal data for the following clearly defined purposes. Each purpose is linked to a lawful basis for processing, which is detailed in Section 5.

• Account creation and management: To register your account, verify your identity, maintain accurate account records, and provide you with access to the platform's full range of services.
• Age verification: To confirm that you meet the minimum age requirement of 21 years before granting access to real-money gaming features.
• Transaction processing: To process deposits, credit winnings, execute withdrawal requests, and maintain accurate financial records of all account activity.
• Anti-money laundering compliance: To screen transactions against regulatory watchlists, assess transaction risk, and report suspicious activity to appropriate authorities where legally required.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, bonus abuse, account takeovers, and other threats to platform integrity.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions for quality assurance purposes.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling behaviour, enforce self-exclusion and limit settings, and fulfil our duty of care obligations to players.
• Promotional communications: To send you relevant bonus offers, platform updates, and promotional content where you have provided consent. You may withdraw this consent at any time by contacting support.
• Platform improvement: To analyse usage patterns, test new features, optimise performance, and improve the overall player experience through aggregated and anonymised analytics.
• Legal compliance: To comply with applicable legal and regulatory obligations, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.

hbaej processes your personal data on the following legal bases in accordance with applicable data protection principles:

• Contractual necessity: Processing required to perform our obligations under the agreement between you and hbaej — including account operation, transaction processing, and customer support — is carried out on the basis of contractual necessity.
• Legal obligation: Processing necessary to comply with anti-money laundering requirements, age verification obligations, fraud reporting duties, and responses to lawful authority requests is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security monitoring, responsible gaming oversight, and platform analytics is based on hbaej's legitimate interests in operating a secure and compliant gaming platform, balanced against your privacy interests.
• Consent: Processing for direct marketing communications and optional personalisation features is carried out only where you have given explicit, freely given, informed, and specific consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

hbaej does not sell, rent, or commercially trade your personal data. We share data with third parties only in the following circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment service providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard as required to process deposits and withdrawals on your behalf. These providers operate under their own privacy frameworks and are bound by data processing agreements with hbaej.
• KYC and identity verification providers: Identity documents and personal details are shared with authorised identity verification partners solely for the purpose of completing mandatory verification checks. These partners are contractually prohibited from using your data for any other purpose.
• Fraud prevention and AML screening services: Limited personal and transaction data is shared with compliance and fraud detection services to screen for fraudulent activity and money laundering risk.
• Game providers: Aggregated, non-personally-identifiable gaming activity data may be shared with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for technical support, dispute resolution, and RNG auditing purposes.
• Legal and regulatory authorities: hbaej may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where required to do so by applicable law, valid legal process, or urgent public interest.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by hbaej may access limited personal data in the course of providing professional services, subject to strict confidentiality obligations.

hbaej's primary player base is located in Bangladesh. Our core infrastructure and data storage are designed to serve Bangladesh Standard Time (BST, UTC+6) operations. Where personal data is processed by third-party service providers whose systems are located outside Bangladesh, hbaej takes reasonable steps to ensure that such transfers are conducted securely and that the receiving party provides an adequate level of data protection.

Measures used to safeguard international data transfers include contractual data processing agreements that impose equivalent data protection obligations on the receiving party, encryption of data in transit and at rest, and limiting the scope of data transferred to only what is necessary for the specific service being provided.

Where you have questions about the specific safeguards applied to any international data transfer involving your personal data, you may direct your enquiry to [email protected].

hbaej uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit the platform. The following categories of cookies are in use:

• Strictly necessary cookies: Essential for the platform to function correctly. These cookies enable session management, authentication, and security features. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming limit configurations. These cookies improve your experience but are not strictly necessary for operation.
• Analytics cookies: Used to collect aggregated, anonymised information about how players navigate and use the platform. This data helps hbaej identify performance issues and prioritise improvements. Individual player behaviour is not commercially profiled through these cookies.
• Security and fraud prevention cookies: Used to detect abnormal navigation patterns, identify automated bot activity, and flag suspicious login behaviour to protect players from account takeover attacks.

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the platform. Disabling functional or analytics cookies will not prevent you from accessing or using the platform but may reduce the quality of your experience.

hbaej does not use third-party advertising cookies, retargeting cookies, or cross-site tracking technologies that build behavioural profiles for the purpose of serving targeted advertising on other websites.

hbaej employs a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. The following technical and organisational measures are in place:

• Transport Layer Security: All data transmitted between your device and hbaej servers is encrypted using TLS 1.2 or higher with 256-bit encryption keys.
• Encryption at rest: Personally identifiable data and financial records stored in hbaej databases are encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff members are granted only the minimum access privileges required to perform their specific role. All access is logged and audited.
• Two-factor authentication: Administrative access to systems containing player data requires multi-factor authentication. Players are encouraged to enable any available account security enhancements.
• Regular security assessments: hbaej conducts periodic security reviews and vulnerability assessments of its platform infrastructure. Identified risks are assessed and remediated according to severity.
• Incident response: hbaej maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, affected players will be notified promptly in accordance with applicable requirements.

hbaej retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual. Where anonymised data is retained for analytical purposes, it no longer constitutes personal data under applicable privacy frameworks.

As a player on the hbaej platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact hbaej at [email protected] with your full name, registered email address, and a description of your request. hbaej will respond within 30 days of receiving a valid request.

The hbaej platform is strictly intended for adults aged 21 years and above. hbaej does not knowingly collect, process, or store personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration process and is enforced prior to any real-money gaming activity being permitted.

If hbaej becomes aware or has reasonable grounds to suspect that personal data has been collected from a person under 21 years of age, that account will be suspended immediately pending investigation, all associated funds will be frozen, and the personal data of the minor will be deleted or returned in accordance with applicable legal requirements.

If you are a parent or guardian and believe that your child has registered an account on the hbaej platform, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

Players are reminded that the 21+ age restriction is not merely a legal formality — it reflects a genuine commitment to protecting younger individuals from the potential harms associated with gambling activity. hbaej takes this obligation seriously and applies multiple age verification layers throughout the registration and verification process.

The hbaej platform may contain references to or integrations with third-party game providers, payment gateways, and technology partners. While hbaej takes care in selecting reputable partners, we do not control the privacy practices of any third-party service and cannot accept responsibility for how those parties handle your personal data under their own systems and policies.

When you interact with a third-party payment gateway such as bKash, Nagad, or Rocket to process a deposit or withdrawal, you are subject to that provider's own terms of service and privacy policy in addition to hbaej's. hbaej recommends that you review the privacy policies of any third-party service with which you interact.

hbaej does not endorse, verify, or take responsibility for the content or privacy standards of any external website or service that may be referenced in support materials or platform documentation.

hbaej reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The "Last Updated" date at the top of this document will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect your rights or how your data is used — hbaej will provide advance notice to registered players via the email address associated with your account or via a prominent notice on the platform, no less than 14 days before the changes take effect. Continued use of the platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage all players to review this Privacy Policy periodically so that you remain informed about how hbaej protects and uses your personal data. If you have questions about any update, contact us at [email protected] before the change takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hbaej handles your personal data, please reach out to us using the details below. Our data support team operates 24 hours a day, 7 days a week, and responds to all privacy-related enquiries within 5 business days of receipt.

• Email: [email protected]
• Live Chat: Available directly within the hbaej platform, 24/7
• Response Language: English
• Operating Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

When contacting us about a privacy matter, please include your registered email address, a clear description of your request or concern, and — where applicable — the specific section of this policy your query relates to. This helps us direct your request to the appropriate team member and respond as efficiently as possible.

hbaej is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response to a privacy complaint, you may seek further recourse through applicable data protection channels in your jurisdiction.