hibajjee Privacy Policy

1.1 Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, or contact our support team, you provide us with personal data including but not limited to:

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Mobile phone number
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and country
• National Identity Card (NID) number or other government-issued identification number (when required for KYC verification)
• Payment method details (e.g., bKash wallet number, Nagad account, Rocket number, Upay account, Visa or Mastercard details)
• Any communications you send to hibajjee via live chat, email, or support tickets

1.2 Information Collected Automatically

When you access or use hibajjee, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location
• Device type, operating system, and browser type and version
• Pages visited, time spent on each page, and navigation paths through hibajjee
• Session start and end times (Bangladesh Standard Time, UTC+6)
• Betting and gaming activity including game selections, stake amounts in ৳ BDT, and outcomes
• Deposit and withdrawal transaction records
• Bonus and promotional offer interactions

1.3 Information From Third Parties

In certain circumstances, hibajjee may receive personal data about you from third parties, including:

• Payment providers (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard) — transaction confirmation and account verification data
• Identity verification services — results of KYC and age verification checks conducted by third-party verification partners
• Fraud prevention services — data relevant to assessing account integrity and preventing financial crime
• Game providers (e.g., Pragmatic Play, Evolution Gaming, Spribe, Ezugi) — gameplay logs and RNG results relevant to dispute resolution

2.1 Primary Purposes

2.2 Marketing Communications

Where you have given your consent, hibajjee may use your email address or mobile phone number to send you promotional communications about offers, bonuses, new game launches, BPL season promotions, Eid special campaigns, Pohela Boishakh bonuses, and other hibajjee news. You may withdraw your consent to receive marketing communications at any time by updating your account preferences or by contacting our support team at support@hibajjee. Withdrawal of marketing consent does not affect your ability to use hibajjee.

2.3 Automated Decision-Making

hibajjee uses automated systems to perform certain functions including fraud detection, responsible gaming monitoring, and bonus eligibility assessments. Where an automated decision has a significant effect on you (for example, account suspension due to automated fraud detection), you have the right to request a manual review by a member of the hibajjee compliance team. To exercise this right, contact support@hibajjee.

3.1 Contractual Necessity

The majority of personal data processing carried out by hibajjee is necessary for the performance of the contract between you and hibajjee — that is, to provide you with the betting and gaming services you have registered for. This includes account management, processing deposits and withdrawals, and enabling you to place bets and play games on the platform.

3.2 Legal Obligation

Certain processing activities are required for hibajjee to comply with applicable legal and regulatory obligations. This includes identity and age verification (KYC), anti-money laundering (AML) record-keeping, and the retention of transaction records for audit purposes.

3.3 Legitimate Interests

hibajjee processes certain data on the basis of its legitimate interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security monitoring, responsible gaming analytics, and internal reporting. Where we rely on legitimate interests, we have assessed that the processing is proportionate and does not unduly impact your privacy rights.

3.4 Consent

Where processing is based on your consent (primarily marketing communications and non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent does not affect your ability to use hibajjee or access your account.

4.1 Service Providers and Data Processors

hibajjee shares personal data with third-party service providers who process data on our behalf and under our instructions. These providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank — for the processing of deposits and withdrawals
• Identity verification providers: third-party KYC and age verification services used to confirm player identity and age
• Fraud prevention and AML monitoring services: used to detect and prevent financial crime and account abuse
• Game providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt, and others — for the provision of gaming content and gameplay log management
• Customer support platforms: live chat and ticketing system providers used to manage player support interactions
• Analytics providers: aggregated and pseudonymised platform usage analytics services

All third-party processors are contractually required to process personal data only as instructed by hibajjee and to maintain appropriate technical and organisational security measures.

4.2 Legal Disclosures

hibajjee may disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required to do so by applicable law, court order, or regulatory instruction. Such disclosures are made only to the extent required and will be documented in our compliance records.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of hibajjee or its assets, personal data held by hibajjee may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the hibajjee website or by email to your registered address, and your rights under this Privacy Policy will remain protected.

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember certain information about your visit — such as your login session or preferred settings — over the course of a browsing session or across multiple visits. hibajjee also uses related technologies such as pixel tags and local storage where applicable.

5.2 Types of Cookies We Use

5.3 Managing Cookies

You can control and manage cookies through your web browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set alerts when new cookies are placed. Please note that disabling essential cookies will impair your ability to log in and use hibajjee. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

6.1 Retention Periods

6.2 Deletion and Anonymisation

At the end of the applicable retention period, hibajjee will securely delete or irreversibly anonymise your personal data. Secure deletion means the data cannot be recovered or reconstructed. Where full deletion is not technically possible (for example, data held in encrypted backups), the data will be isolated from active processing and deleted at the next available backup refresh cycle.

7.1 Summary of Your Rights

• Right of Access: You may request a copy of the personal data hibajjee holds about you, along with information about how it is used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Restriction of Processing: In certain circumstances, you may request that hibajjee restrict the processing of your personal data while a dispute or investigation is ongoing.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that we provide your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without penalty to your account access.

7.2 How to Exercise Your Rights

To exercise any of the rights listed above, please contact hibajjee's support team at support@hibajjee. We will respond to all valid data rights requests within 30 calendar days of receipt. In some cases we may need to verify your identity before processing a request, to ensure that personal data is not disclosed to or amended by an unauthorised person.

8.1 Technical Safeguards

hibajjee employs the following technical security measures to protect personal data:

• SSL/TLS Encryption: All data transmitted between your browser or app and hibajjee is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive data stored on hibajjee servers is encrypted at rest using strong encryption standards.
• Access Controls: Access to personal data is strictly limited to authorised hibajjee personnel on a need-to-know basis, with role-based access control and multi-factor authentication enforced.
• Firewalls and Intrusion Detection: hibajjee's infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems.
• Penetration Testing: hibajjee conducts regular security assessments and penetration testing to identify and address vulnerabilities.

8.2 Organisational Safeguards

In addition to technical controls, hibajjee maintains organisational security policies including: mandatory data protection training for all staff who access personal data; a formal data breach response plan with defined escalation procedures; vendor due diligence requirements for all third-party processors; and a privacy-by-design approach to the development and deployment of new platform features.

8.3 Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, hibajjee will notify affected players without undue delay and will take immediate steps to contain the breach, assess its scope, and prevent recurrence. Notification will be made via the email address registered on your account and will include details of the nature of the breach, the data categories affected, and the steps hibajjee is taking in response.

9.1 Game Provider Integrations

hibajjee's casino and gaming products are powered by third-party game providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt. These providers may collect certain gameplay and technical data in accordance with their own privacy policies and data processing agreements with hibajjee. hibajjee ensures that all game provider integrations are governed by data processing agreements that comply with our data protection standards.

9.2 Payment Provider Data

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or City Bank, the processing of that transaction is also subject to the privacy policy of the relevant payment provider. hibajjee is not responsible for how those providers handle your data within their own systems. We encourage you to review the privacy policies of any payment provider you use in connection with your hibajjee account.

10.1 No Data Collection from Minors

hibajjee does not knowingly collect, process, or retain personal data from individuals under the age of 18. If we become aware that personal data has been collected from a person under 18, we will immediately close the associated account, delete all associated personal data, and take appropriate steps in accordance with our responsible gaming and safeguarding obligations.

10.2 Reporting Underage Use

If you have reason to believe that a person under the age of 18 has registered an account or is actively using hibajjee, please report this to our support team immediately at support@hibajjee. We investigate all such reports as a matter of priority and will take immediate action upon receipt. Parents and guardians are encouraged to use parental control software to restrict minors' access to online gambling platforms. 18+ Only — always.

11.1 Notification of Changes

When we make material changes to this Privacy Policy, we will notify registered players by posting a prominent notice on the hibajjee website and, where appropriate, by sending a notification to the email address registered on your account. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent version. We encourage you to review this Privacy Policy periodically to remain informed of how hibajjee protects your personal data.

11.2 Continued Use as Acceptance

Your continued use of hibajjee following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Privacy Policy, you should cease using hibajjee and, if applicable, close your account by contacting our support team at support@hibajjee.

12.1 How to Reach Us

You can contact the hibajjee data team using the following details:

• Email: support@hibajjee
• Subject Line for Data Requests: "Privacy Request — [Your Registered Username]"
• Support Hours: 24 hours a day, 7 days a week
• Response Time Target: Acknowledgement within 5 business days; full response within 30 calendar days (BST, UTC+6)

When submitting a data rights request, please include your registered email address and, where possible, the specific data category or processing activity your request relates to. This will help us handle your request as efficiently as possible.