hbaj Privacy Policy

This Privacy Policy ("Policy") describes how hbaj ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal information of individuals ("you", "the User", "the Player") who access or use the hbaj website and services located at hbaj.bio and any associated mobile-optimised interfaces.

hbaj is committed to handling your personal data with care, transparency, and respect. We understand that players share sensitive information — including financial details and identity documents — in order to use our platform, and we take that responsibility seriously. This Policy sets out our practices in plain language so that you can make informed decisions about your data.

By registering an account on hbaj or continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue your use of the hbaj platform and may request account closure by contacting support.

This Policy should be read alongside the hbaj Terms and Conditions, which govern the overall use of the platform. In the event of any conflict between this Policy and the Terms and Conditions on matters relating to personal data, this Policy shall take precedence.

hbaj collects personal data in several categories depending on your interaction with the platform. The following table summarises the categories of data we may collect and the context in which they are gathered:

hbaj does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for identity verification purposes. If you voluntarily disclose such information in a support communication, we will handle it with appropriate care and will not use it for any purpose beyond addressing your specific enquiry.

hbaj collects personal data through the following channels and mechanisms:

• Direct submission: When you register an account, complete your player profile, submit KYC documents, make a deposit or withdrawal request, contact support via live chat or email, or respond to a survey or promotion, you provide data directly to hbaj.
• Automated technical collection: When you visit hbaj.bio, our servers and analytics tools automatically record technical data including your IP address, browser details, device identifiers, and navigation behaviour. This occurs whether or not you are logged in to an account.
• Cookies and similar technologies: hbaj uses first-party cookies and, where applicable, third-party analytics cookies to understand how users navigate the platform. See Section 7 for full details on our cookie practices.
• Payment processors: When you transact via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, or Mastercard, the relevant payment provider shares limited transaction confirmation data with hbaj to reconcile your deposit or withdrawal. hbaj does not have access to the full credentials of your payment accounts.
• KYC verification partners: Where hbaj uses a third-party identity verification service provider to assist with document checking, that provider may share the results of its verification checks (pass, fail, or further information required) with hbaj.
• Game providers: Third-party game providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may pass session data and game outcome data to hbaj for the purposes of account reconciliation and responsible gaming monitoring.

hbaj processes your personal data on one or more of the following lawful bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and hbaj — that is, to operate your account, process your transactions, settle bets, and deliver the services you have requested.
• Legal obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, and fraud prevention obligations.
• Legitimate interests: Processing is carried out in pursuit of hbaj's legitimate business interests, including platform security, fraud detection, customer support quality monitoring, and platform improvement — provided those interests are not overridden by your data protection rights.
• Consent: Where hbaj relies on your consent as the legal basis for processing — for example, to send you promotional communications by email or SMS — you may withdraw that consent at any time by updating your communication preferences in account settings or contacting [email protected].

Where processing is based on consent, withdrawal of that consent will not affect the lawfulness of processing carried out prior to the withdrawal. Where processing is necessary for the performance of the contract or for legal compliance, you cannot opt out of that processing without closing your hbaj account.

hbaj uses the personal data it collects strictly for the purposes described below. We do not use your data in any way that would be incompatible with the purposes for which it was originally collected without first informing you and, where required, obtaining your consent.

• Account management: Creating, maintaining, and securing your hbaj player account; verifying your identity at registration and during ongoing play; processing login requests; managing account preferences.
• Service delivery: Processing deposits and withdrawals via your chosen payment method; settling sports bets and casino game outcomes; crediting and debiting bonus balances; delivering promotional offers you have opted into.
• KYC and compliance: Verifying your identity and age to comply with our 18+ policy; conducting enhanced due diligence where required; monitoring transactions for signs of money laundering, fraud, or other financial crime.
• Responsible gaming: Monitoring your gambling activity to identify patterns that may indicate problem gambling behaviour; administering self-exclusion requests, deposit limits, and session reminders; communicating responsible gaming resources to at-risk players.
• Customer support: Responding to your enquiries, complaints, and requests via live chat and email; maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Security and fraud prevention: Detecting and investigating suspicious account activity, unauthorised access attempts, bonus abuse, multi-accounting, and other prohibited conduct described in our Terms and Conditions.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how players use the platform, identify technical issues, and improve the overall user experience.
• Marketing communications: Sending you relevant promotional offers, bonus announcements, and platform updates where you have consented to receive such communications. You may opt out at any time.

hbaj does not sell, rent, or trade your personal data to third-party marketers or data brokers. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment processors: Your financial data is shared with the relevant payment service provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, Mastercard) solely to process your requested transaction. Each provider is subject to their own privacy policy and applicable financial services regulations.
• KYC and identity verification providers: Where hbaj engages a specialist third-party service to assist with identity document verification, your submitted documents and personal details are shared with that provider solely for the purpose of completing the verification check.
• Game software providers: Limited player session data is shared with game providers (Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe) as necessary to deliver games, reconcile game outcomes, and investigate disputes.
• IT and platform service providers: hbaj works with trusted technology partners for hosting, cybersecurity, analytics, and customer support software. These providers process your data on hbaj's behalf and are contractually bound to handle it in accordance with applicable data protection standards.
• Legal and regulatory authorities: hbaj may disclose your personal data to law enforcement agencies, regulatory bodies, or other public authorities where required to do so by applicable law, court order, or regulatory directive. In cases of suspected money laundering, fraud, or serious crime, hbaj will report to the appropriate authorities without prior notice to you.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the hbaj business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to data processing practices that may result from it.

hbaj uses cookies and similar tracking technologies to enhance your experience on the platform, to keep you securely logged in during your session, and to collect anonymous analytics data that helps us understand how the platform is used.

A cookie is a small text file placed on your device by a website you visit. Cookies cannot execute programs or deliver viruses to your device. They are used by virtually all websites and serve several purposes:

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, maintain your account security state, and remember your preferences within a single session. These cookies cannot be disabled without impairing core platform functionality.
• Performance and analytics cookies: These cookies collect anonymous information about how visitors use the hbaj platform — which pages are most visited, how long sessions last, and where users encounter errors. This data is aggregated and does not identify individual users.
• Functionality cookies: These cookies remember your preferences (such as language settings and preferred payment method display) so that you do not have to re-enter them on each visit.
• Marketing and targeting cookies: Where you have consented, these cookies track your browsing behaviour to enable hbaj to deliver relevant promotional content. They may be set by third-party analytics platforms operating on hbaj's behalf.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Note that disabling certain cookies may affect the functionality of the hbaj platform — in particular, strictly necessary cookies are required for account login and session security to operate correctly.

hbaj retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following permanent account closure, to satisfy anti-money-laundering record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, in accordance with applicable financial compliance requirements.
• KYC documents: Retained for the duration of your account and for a minimum of five years following account closure. Where a regulatory authority specifies a longer retention period, that period will apply.
• Support and communications records: Retained for three years from the date of the most recent communication, or longer where the communication relates to an ongoing dispute or compliance matter.
• Cookie and analytics data: Anonymised analytics data is retained in aggregated form indefinitely. Individual-level session and cookie data is retained for a rolling period of 13 months.
• Responsible gaming records: Self-exclusion requests and responsible gaming tool settings are retained for the duration of the exclusion period and for five years thereafter, to prevent circumvention of self-exclusion by re-registration.

When your personal data is no longer required for any of the purposes listed above, hbaj will securely delete or anonymise it. Where technical constraints prevent immediate deletion — for example, in backup systems — the data will be isolated from active processing until deletion is possible.

hbaj takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the hbaj platform is encrypted in transit using industry-standard SSL/TLS protocols. The padlock icon in your browser's address bar confirms that an encrypted connection is active.
• Encryption at rest: Sensitive data fields — including identity document images, financial account identifiers, and password hashes — are encrypted in our database storage using strong symmetric encryption.
• Access controls: Access to personal data within hbaj's internal systems is restricted on a strict need-to-know basis. Support agents and internal staff are granted the minimum level of data access required to perform their specific functions.
• Two-step account verification: hbaj offers SMS-based two-step verification for player accounts. We strongly recommend that all players enable this feature to protect against unauthorised account access.
• Automatic session timeouts: Player sessions are automatically terminated after a period of inactivity to reduce the risk of unauthorised account access on shared devices.
• Security monitoring: hbaj employs automated monitoring tools to detect and alert on unusual account activity, login anomalies, and potential data breach indicators in real time.
• Regular security assessments: hbaj conducts periodic reviews of its data security practices and infrastructure to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a significant risk to your rights, hbaj will notify affected players promptly and take immediate steps to contain the breach and mitigate potential harm.

You are also responsible for maintaining the security of your account. Choose a strong, unique password, do not share your login credentials with anyone, and contact hbaj support immediately at [email protected] if you suspect unauthorised access to your account.

As a player on the hbaj platform, you have a number of rights in relation to your personal data. hbaj is committed to honouring these rights promptly and without unnecessary barriers. The following rights apply to your personal data held by hbaj:

• Right of access: You have the right to request a copy of the personal data hbaj holds about you, along with information about how and why it is being processed. We will respond to valid access requests within 30 days.
• Right to rectification: If any personal data hbaj holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic profile information directly within your account settings, or contact support for assistance with other data fields.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing and hbaj has no overriding legitimate interest. This right is subject to hbaj's legal retention obligations — we cannot delete data that we are required by law to keep.
• Right to restriction: You may request that hbaj restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that hbaj provides your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where hbaj relies on legitimate interests as the legal basis. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw marketing consent, update your preferences in account settings or email [email protected].

To exercise any of the rights listed above, contact the hbaj support team at [email protected] with the subject line "Data Rights Request". hbaj will respond within 30 days and may request proof of your identity before processing the request to ensure data is not disclosed to or altered by an unauthorised party.

hbaj is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. The hbaj registration process requires users to confirm that they are aged 18 or above, and our KYC verification process independently verifies player age using government-issued identity documents.

If hbaj discovers — through its own verification processes or following a report from a parent or guardian — that an account has been registered by a person under 18 years of age, we will immediately suspend the account, void any bets or game activity associated with it, and securely delete all personal data associated with that account, subject to any legal retention obligations that may apply.

If you believe a person under 18 has registered an account on hbaj, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act on all credible reports promptly.

The hbaj platform may display references to third-party game providers and payment services. These third parties operate their own platforms and services, which are governed by their own privacy policies. hbaj is not responsible for the data practices of third-party entities whose services are accessed through or in connection with the hbaj platform.

When you interact with a third-party game provider's interface embedded within the hbaj platform — for example, a live dealer table streamed by Evolution Gaming or a slot game by Pragmatic Play — that provider's software may independently collect certain session and technical data in accordance with their own privacy policy. hbaj recommends reviewing the privacy policies of any third-party providers whose games or services you use.

Similarly, when you transact via bKash, Nagad, Rocket, or any other payment provider, that provider's own privacy policy governs the processing of your payment data within their system. hbaj is not responsible for how payment providers handle data once a transaction is initiated on their platform.

hbaj reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to our platform and services. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

When material changes are made to this Policy — for example, changes that affect what data we collect, how we use it, or with whom we share it — hbaj will endeavour to notify registered players by displaying a prominent notice on the platform and/or by sending a notification to the contact information registered on your account before the changes take effect.

Your continued use of the hbaj platform following the publication of a revised Privacy Policy constitutes your acknowledgment of and agreement to the updated practices described therein. If you do not agree with any changes to this Policy, you should cease using the platform and may request account closure by contacting the hbaj support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data hbaj holds about you, please contact the hbaj data support team using any of the following methods:

• Live Chat: Available 24/7 directly from the hbaj platform. Average response time is 2–5 minutes. For data rights requests, please state "Data Rights Request" at the start of your chat.
• Email: [email protected] — for data-related enquiries, use the subject line "Privacy / Data Request" to ensure your message is routed to the appropriate team member. Please allow up to 30 days for a full response to data rights requests.

hbaj takes all privacy enquiries seriously and will acknowledge receipt of your request promptly. Where a request requires identity verification before it can be processed, we will inform you of this requirement and guide you through the verification steps as efficiently as possible.