hbija Privacy Policy – How We Handle Your Data

hbija ("we", "us", or "our") operates the online gaming platform accessible at hbija.org. This Privacy Policy describes how hbija collects, uses, stores, shares, and protects personal information provided by members and visitors ("you" or "your") when you use the Platform. By registering an account or using any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Privacy Policy applies to all pages, features, and services available under the hbija domain. It should be read alongside our Terms and Conditions, which govern your use of the Platform. We may update this Privacy Policy from time to time; the most current version will always be available at hbija.org/privacy-policy with the date of the most recent revision clearly stated.

hbija collects personal information that you provide directly, information generated through your use of the Platform, and in some cases information received from third-party service providers. The categories of personal data we collect include:

• Identity data: full name, date of birth, gender, and a copy of your National Identity Card (NID) or other government-issued photo identification, collected as part of our KYC verification process.
• Contact data: mobile phone number, email address, and — where voluntarily provided — a city or region of residence within Bangladesh.
• Account data: username, hashed password, account preferences, communication preferences, and transaction history (deposits, withdrawals, wagers, and bonuses).
• Payment data: the mobile wallet number used for deposits and withdrawals (bKash, Nagad, Rocket, or Upay). We do not store your full wallet PIN or full payment credentials on our servers.
• Technical data: IP address, browser type and version, device type, operating system, time zone, and pages visited on the Platform.
• Usage data: game history, betting patterns, session duration, features accessed, and responsible gaming tool usage (such as deposit limit settings and self-exclusion requests).

hbija processes your personal data only for the specific purposes described below. We rely on one or more of the following legal bases for each processing activity:

• Account administration: to create and manage your hbija account, verify your identity, process KYC, and communicate account-related information to you.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and to maintain accurate financial records.
• Legal compliance: to comply with anti-money-laundering (AML) obligations, KYC requirements, and any other applicable legal or regulatory requirements that apply to hbija's operations.
• Platform improvement: to analyse how members use the Platform, identify technical issues, develop new features, and improve the overall user experience.
• Responsible gaming: to monitor gaming behaviour and apply responsible gaming tools, deposit limits, and self-exclusion measures where appropriate or where requested by a member or third party.

hbija does not sell, rent, or trade your personal data to third parties. We may share your personal data only in the following limited circumstances:

• Service providers: third-party companies that process data on our behalf to operate the Platform, such as payment processors (bKash, Nagad, Rocket), game providers (Evolution Gaming, Ezugi, Pragmatic Play), identity verification services, and hosting providers. These providers are contractually bound to use your data only for the specific purpose for which it was shared and to maintain appropriate security standards.
• Legal obligations: where hbija is required by law, court order, or regulatory authority to disclose personal data. In such cases we will disclose only the minimum amount of information required.
• Fraud prevention and security: where disclosure is necessary to investigate suspected fraud, money laundering, or security incidents affecting the Platform or its members.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of hbija's business, personal data held by hbija may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

hbija requires all third-party service providers to maintain appropriate technical and organisational security measures to protect your personal data. We do not allow our service providers to use your personal data for their own purposes.

hbija uses cookies, web beacons, and similar tracking technologies to support the operation of the Platform and to improve your experience. The types of cookies we use include:

• Essential cookies: required for the Platform to function correctly, including maintaining your login session and remembering your security preferences. These cannot be disabled.
• Functional cookies: used to remember your preferences such as language settings, display options, and previously viewed game categories, so you do not have to re-configure them on each visit.
• Analytics cookies: used to collect aggregated, anonymised data about how visitors use the Platform, such as which pages are visited most frequently, session durations, and error rates. This information helps us improve the Platform.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Most modern mobile browsers (including Chrome on Android and Safari on iOS) provide cookie management options in their Settings menu.

hbija takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption on all Platform pages, login pages, account pages, and payment flows.
• Passwords stored in hashed form using industry-standard algorithms; plain-text passwords are never stored or transmitted by hbija.
• Access controls limiting internal staff access to personal data on a need-to-know basis, with audit logging of data access events.
• Regular security assessments of the Platform infrastructure, including testing for vulnerabilities in authentication systems, payment flows, and data storage.
• Incident response procedures to detect, contain, and respond to data security incidents, including notification to affected members where required.

hbija retains your personal data for as long as your account is active and for such period thereafter as is necessary to comply with our legal obligations or to resolve disputes. Specific retention periods include:

• Account and transaction records are retained for a minimum of five years following account closure, in accordance with anti-money-laundering obligations.
• Identity verification documents (KYC) are retained for the period required by applicable law, typically five years from the date of verification.
• Support correspondence and complaint records are retained for a minimum of two years from the date of the last communication.
• Where data is no longer required for any lawful purpose, hbija will securely delete or anonymise it in a manner that prevents recovery or identification.

You have the following rights in relation to the personal data that hbija holds about you. To exercise any of these rights, please contact us at [email protected]:

• Right of access: you may request a copy of the personal data hbija holds about you, together with information about how it is being processed.
• Right of rectification: you may request that hbija correct any inaccurate or incomplete personal data we hold about you.
• Right of erasure: in certain circumstances you may request that hbija delete your personal data. This right is subject to our legal obligations to retain certain records (for example, AML and KYC records). Where we are unable to delete your data in full, we will explain why.

hbija aims to respond to all data rights requests within 30 days of receipt. Where a request is complex or where hbija receives a large number of requests simultaneously, the response period may be extended. We will notify you if an extension is required.

The hbija Platform is strictly intended for persons aged 21 and above. hbija does not knowingly collect or process personal data relating to any person under the age of 21. If you believe that a person under 21 has provided personal data to hbija, please contact us immediately at [email protected] and we will take steps to delete such data promptly. Parents and guardians are encouraged to monitor the online activities of minors in their care.

• Age verification is a mandatory step in the hbija registration process. hbija uses identity document checks to confirm that all registering members are aged 21 or above.
• Where hbija identifies or is notified that an account has been registered by a person under 21, the account will be suspended immediately, all associated data reviewed, and the account permanently closed. Any funds deposited by an underage user will be returned to the originating payment method where possible.
• hbija complies with all applicable legal requirements relating to the protection of minors in online gaming environments. 21+ only.

hbija may send you promotional communications about new games, bonuses, promotions, and Platform updates. We will only send marketing communications to you if you have opted in to receive them, or where we have an existing relationship with you as an active member and the communication relates to similar services. Marketing communications from hbija may be sent via:

• Email: to the registered email address on your account.
• SMS: to the registered Bangladeshi mobile number on your account.
• In-Platform notifications: messages displayed when you log in to your hbija account.
• You may opt out of marketing communications at any time by updating your communication preferences in your account settings, or by contacting [email protected]. Opting out of marketing will not affect transactional or account-related communications, which are required for the operation of your account.
• hbija does not send marketing communications to members who have self-excluded or who have requested that their account be closed.

hbija reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we collect or use your personal data — hbija will make reasonable efforts to notify active members via email or through a prominent notice on the Platform before the changes take effect.

The "Last Updated" date at the top of this page indicates when the Privacy Policy was most recently revised. Your continued use of the Platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the Platform and contact [email protected] to request account closure.

This Privacy Policy is governed by and construed in accordance with applicable law. Any dispute arising from this Privacy Policy that cannot be resolved through direct communication with hbija should be referred to the appropriate forum under applicable law. Nothing in this Privacy Policy limits your rights as a consumer or data subject under applicable legislation.

If you have any questions, concerns, or complaints about this Privacy Policy or about how hbija handles your personal data, please contact our support team. We take all privacy queries seriously and aim to respond within one business day.

hbija is committed to resolving privacy concerns promptly and fairly. Where you are not satisfied with our response, you may have the right to escalate your complaint under applicable law.

For all privacy-related enquiries, write to our support team at the email address below. Please include "Privacy Query" in the subject line so we can route your message to the right team member promptly.