hbajie Privacy Policy

hbajie ("we", "us", "our", "the Platform") operates the website at https://hbajie.pro and is committed to protecting the personal information of all players, visitors, and users who access our services, including online sports betting, cricket betting, live casino, and slots games. This Privacy Policy ("Policy") describes how we collect, use, store, share, and safeguard your personal data in connection with your use of the hbajie platform.

By accessing or using any part of the hbajie platform, creating an account, making a deposit, or placing a bet, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices it describes. This Policy forms part of the hbajie Terms & Conditions and should be read in conjunction with them.

If you are not comfortable with any aspect of this Policy, you should refrain from using hbajie's services and contact us at [email protected] with any questions before proceeding. hbajie reserves the right to update this Policy at any time. Material changes will be communicated via the email address registered on your account. Your continued use of the platform after notification of an update constitutes acceptance of the revised Policy.

hbajie collects personal data in three primary ways: data you provide to us directly, data generated automatically by your use of the platform, and data received from trusted third parties involved in delivering our services. The categories of personal data we may collect include, but are not limited to, the following:

hbajie processes your personal data only where we have a lawful basis to do so. The primary legal bases we rely on are: performance of a contract (processing necessary to operate your account and deliver services), legal obligation (KYC, AML, and financial record-keeping requirements), legitimate interests (fraud prevention, platform security, and service improvement), and consent (marketing communications, where applicable). The specific purposes for which we use each category of data are set out below:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and provide access to hbajie's full service offering including cricket betting, live casino, and slots.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records in BDT.
• Identity verification (KYC/AML): To confirm your identity, verify your age (21+), and comply with anti-money laundering obligations by screening transactions against relevant financial crime indicators.
• Customer support: To respond to your queries, investigate disputes, and maintain records of support interactions for quality assurance and continuity.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bot activity, and collusion between players.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling and to administer the deposit limits, loss limits, session reminders, and self-exclusion tools available in your account settings.
• Platform improvement: To analyse usage patterns, test new features, and improve the performance, reliability, and user experience of the hbajie platform.
• Marketing and promotions (with consent): Where you have opted in to marketing communications, to send you information about hbajie promotions, bonus offers, BPL season specials, Eid offers, and other relevant campaigns via email or SMS. You may withdraw this consent at any time by contacting [email protected].
• Legal compliance: To maintain records required by applicable financial regulations, to cooperate with lawful requests from competent authorities, and to enforce hbajie's Terms & Conditions.

hbajie uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform effectively, maintain your login session, remember your preferences, and collect analytical data about how the site is used. The main categories of cookies used by hbajie are described below.

You may control cookie behaviour through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Disabling functional cookies may affect the performance and personalisation of your hbajie experience. hbajie does not use third-party advertising cookies or cross-site tracking cookies.

hbajie does not sell, lease, or trade your personal data to any third party. We share data only where it is necessary to deliver or protect the hbajie service, and only under binding data protection agreements. The categories of third parties with whom we may share your data are as follows:

• Payment processors: Your payment method identifier and transaction amount are shared with the relevant payment partner — bKash, Nagad, Rocket, Upay, Visa, or Mastercard — solely for the purpose of processing your requested deposit or withdrawal. These partners operate under their own privacy policies and regulatory obligations.
• KYC and identity verification providers: Where a third-party identity verification service is used to process your NID, passport, or other documents, only the minimum necessary data is shared, under a signed data processing agreement that prohibits the provider from using your data for any purpose other than verification.
• Game providers: Technical session tokens and anonymised player identifiers may be shared with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to facilitate your gameplay session. These providers do not receive your full name, contact details, or financial data.
• Fraud prevention and security services: Aggregated or pseudonymised technical data (IP addresses, device hashes, behavioural signals) may be shared with fraud detection services to identify and block suspicious activity.
• Legal and regulatory authorities: Where hbajie is required by law or by a competent authority to disclose personal data — for example, in connection with an AML investigation or a court order — we will comply with such requirements. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of hbajie's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

hbajie retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The key retention periods are as follows:

• Account and identity data: Retained for the duration of your active account, plus a minimum of five years from the date of account closure, to satisfy AML and financial record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• KYC documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later.
• Support communications: Retained for two years from the date of the last interaction, unless the communication is relevant to an unresolved dispute, in which case it is retained until the dispute is fully resolved.
• Technical and analytical data: Retained for up to 90 days in raw form; aggregated and anonymised analytical reports may be retained indefinitely.
• Marketing consent records: Retained for the duration of your consent, plus three years from the date consent is withdrawn, to demonstrate compliance with consent obligations.

When the applicable retention period expires, your data will be securely deleted or irreversibly anonymised. Where technical constraints prevent immediate deletion, data will be isolated and protected from further processing until deletion can be completed.

hbajie respects your rights over your own personal data. The following rights are available to all registered players. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Username]". We will acknowledge your request within 48 hours and provide a substantive response within 30 days (Bangladesh Standard Time, BST UTC+6).

• Right of Access: You may request a copy of the personal data hbajie holds about you, including a summary of how it is being used.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct or update it. Some data fields — such as your registered name — may require documentary evidence before they can be amended.
• Right to Erasure ("Right to be Forgotten"): You may request that hbajie delete your personal data. Please note that this right is subject to limitations: where retention is required by law (e.g., AML record-keeping) or where the data is necessary to resolve an open dispute, deletion may be deferred or partial.
• Right to Restriction of Processing: You may request that hbajie temporarily restrict the processing of your data — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request a machine-readable export of the personal data you have provided to hbajie, in a structured and commonly used format (e.g., CSV or JSON).
• Right to Object to Marketing: You may withdraw consent for marketing communications at any time. This will not affect your ability to use hbajie's core services, nor will it affect the lawfulness of processing carried out prior to withdrawal.
• Right Not to Be Subject to Automated Decision-Making: Where hbajie uses automated systems to make decisions that significantly affect you — for example, automated fraud scoring that leads to an account suspension — you have the right to request a human review of that decision.

hbajie implements a multi-layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our technical and organisational security measures include:

• TLS/SSL encryption for all data in transit between your device and hbajie's servers.
• AES-256 encryption for sensitive data fields stored in our databases, including identity documents and payment method identifiers.
• OTP (one-time password) verification for new device logins, available as an opt-in security layer within your account settings.
• Role-based access controls ensuring that hbajie staff can only access player data where their job function requires it.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Automatic session timeout for idle sessions, reducing the risk of unauthorised access from unattended devices.
• Real-time fraud monitoring using automated systems that flag unusual account behaviour, atypical login locations, and suspicious transaction patterns for manual review.

While hbajie takes all reasonable steps to protect your personal data, no system is entirely immune to security incidents. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, hbajie will notify affected players without undue delay via their registered email address, describing the nature of the breach, the data involved, and the steps being taken to address it.

You are also responsible for maintaining the security of your own account. Use a strong, unique password, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect that your account has been compromised.

hbajie is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and hbajie reserves the right to suspend any account where there is reasonable grounds to suspect that the account holder may be under the minimum age, pending submission and verification of acceptable proof-of-age documentation.

If hbajie discovers that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage player will be returned via the original deposit method after identity is confirmed.

If you are the parent or guardian of a minor and believe that your child has accessed or registered on hbajie, please contact us immediately at [email protected]. We will treat such reports as a priority and act promptly.

hbajie's primary services are operated for the Bangladesh market. Some of our third-party service providers — including game providers such as Pragmatic Play, Evolution Gaming, and NetEnt, and certain technical infrastructure providers — may process data outside of Bangladesh. Where such transfers occur, hbajie ensures that appropriate safeguards are in place, including data processing agreements that require the recipient to maintain data protection standards equivalent to those described in this Policy.

hbajie does not transfer your full identity or financial data outside of the providers directly necessary to deliver your payment or verify your identity. All such transfers are conducted on a minimum-necessary basis and under contractual protections.

If you have any questions, concerns, or complaints about this Privacy Policy or hbajie's data practices, please contact our support team. We are available 24/7 in English, operating on Bangladesh Standard Time (BST, UTC+6).