hbaju Privacy Policy

hbaju collects personal information in the following categories, depending on how you interact with the platform:

1.1 Registration & Account Data

When you create a hbaju account, we collect the information you provide directly, which includes:

• Full legal name
• Date of birth (used to verify the 18+ age requirement)
• Email address
• Bangladeshi mobile phone number (linked to bKash, Nagad, Rocket, or Upay)
• Username and encrypted password
• Preferred currency and language settings

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and to verify player age before processing withdrawals, hbaju may request:

• Government-issued photo identification (National ID Card, passport, or driving licence)
• Proof of address (utility bill, bank statement, or similar document dated within three months)
• Proof of payment method ownership (screenshot of registered mobile financial service wallet)
• Selfie photograph for biometric ID matching where required

1.3 Financial Transaction Data

Every deposit and withdrawal you make on hbaju generates a transaction record. We retain details including the payment method used, the amount transacted in BDT or cryptocurrency equivalent, the date and time of the transaction, and the transaction reference number issued by the payment provider (bKash, Nagad, Rocket, Upay, USDT network, or card processor).

1.4 Gameplay and Betting Data

We record all betting and gaming activity on the platform, including game types played, bet amounts, outcomes, session durations, and wagering history. This data is used to manage bonus eligibility, detect irregular patterns, and fulfil responsible gaming obligations.

1.5 Technical and Device Data

When you access hbaju, our servers automatically collect certain technical information:

• IP address and approximate geographic location (city/region level)
• Device type, operating system, and browser version
• Referring URL and exit page
• Session timestamps and page interaction data
• Cookie identifiers (see Section 4)

1.6 Communications Data

If you contact hbaju support via email or live chat, we retain a record of that communication including the content of messages, timestamps, and any attachments. This data is used to resolve support requests, improve our service, and maintain an audit trail of player-platform interactions.

hbaju processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes described below:

hbaju will not use your personal data for any automated decision-making that produces significant legal effects without first notifying you and providing you with a right to request human review of that decision.

If you have opted in to receive promotional communications from hbaju — including information about bonuses, seasonal promotions (such as Eid, Pohela Boishakh, or BPL tournament offers), and new game launches — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

hbaju does not sell your personal data. We share data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

Payment Processors: When you make a deposit or request a withdrawal, your transaction data is shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, USDT network operators, or card processors (Visa/Mastercard acquirers) — to the extent required to complete the transaction. These providers operate under their own privacy policies and are bound by applicable financial data protection standards.

Game and Technology Providers: hbaju uses certified third-party game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. Your gameplay session data (such as bet amounts and game IDs, but not full account details) is shared with these providers as part of the technical operation of their games on our platform. All providers are contractually bound to use this data only for game operation and auditing purposes.

Identity Verification Services: KYC document verification may be carried out in partnership with certified identity verification technology providers. These providers process your identity documents solely for the purpose of verifying your age and identity and are subject to strict data processing agreements with hbaju.

Legal and Regulatory Disclosures: hbaju may disclose your personal data to law enforcement agencies, regulatory authorities, or courts if required to do so by applicable law, by legal process, or where we have a good-faith belief that such disclosure is necessary to prevent fraud, protect the safety of our users, or fulfil obligations under applicable AML regulations. We will notify you of any such disclosure where permitted to do so by law.

Business Transfers: In the event that hbaju undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity. We will provide notice of any such transfer via a prominent notice on hbaju.net and, where required, seek your renewed consent.

hbaju uses cookies and similar tracking technologies to operate the platform securely, remember your session preferences, and understand how players interact with the site. The following categories of cookies may be present on hbaju.net:

Essential cookies cannot be disabled as they are required for the platform to function securely. You may disable functional, analytics, and marketing cookies through your browser settings at any time. Note that disabling functional cookies may affect your platform experience — for example, your preferred deposit method may not be remembered between sessions.

hbaju does not use third-party advertising pixels (such as those operated by social media platforms) that track your behaviour across websites other than hbaju.net. We do not participate in cross-site behavioural advertising networks.

hbaju implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption in Transit: All data exchanged between your browser or device and hbaju servers is encrypted using industry-standard TLS 1.2 or higher. This applies to all pages of hbaju.net, including the login interface, deposit flow, and account management sections.
• Encryption at Rest: Sensitive stored data — including KYC documents, identity verification records, and financial transaction logs — is encrypted at rest using AES-256 or equivalent encryption standards.
• Password Security: Account passwords are never stored in plain text. They are hashed using a one-way cryptographic hashing algorithm before storage, meaning that even hbaju staff cannot retrieve your original password.
• Access Controls: Access to systems that hold player personal data is restricted on a strict need-to-know basis. Staff are required to complete data handling training and are subject to confidentiality obligations.
• Intrusion Detection: hbaju operates continuous monitoring on its platform infrastructure to detect and respond to unauthorised access attempts, abnormal traffic patterns, and potential data breaches in real time.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their hbaju account for an additional layer of login security. Details on enabling 2FA are available within your account settings.

Data Retention: hbaju retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal obligations. As a general guideline:

• Active account data is retained for the lifetime of the account.
• KYC verification documents are retained for a minimum of five years from the date of verification, in line with standard AML record-keeping practices.
• Financial transaction records are retained for a minimum of five years from the date of the transaction.
• Customer support communications are retained for two years from the date of the interaction.
• Analytics and technical log data is anonymised or deleted within 24 months of collection.

As a player on hbaju, you hold a range of rights with respect to your personal data. You may exercise any of these rights at any time by contacting [email protected] with a clear description of your request and sufficient information to identify your account. hbaju will respond to all valid data rights requests within 30 calendar days.

The hbaju platform integrates with a number of third-party services to deliver its full range of features. Each of these services operates under its own privacy policy and data handling standards. hbaju selects partners that meet acceptable data security standards and enters into data processing agreements where required.

Game Providers: Certified game studios including Pragmatic Play, Evolution Gaming, Mic rogaming, NetEnt, Spribe, and Ezugi supply the games available on hbaju. When you play a game powered by one of these providers, limited session data (such as bet amounts, game round IDs, and RNG outcomes) is processed by that provider's servers. This data is used solely for game operation, fair-play auditing, and dispute resolution. Game providers do not receive your full personal profile, payment details, or KYC documents.

Payment Technology Partners: bKash, Nagad, Rocket, and Upay are independent mobile financial services regulated under Bangladesh Bank guidelines. Visa and Mastercard transactions are processed via certified payment gateway intermediaries. USDT and Bitcoin transactions are processed via blockchain network infrastructure. Each payment partner handles transaction data under their own applicable privacy and security standards. hbaju shares only the minimum data required to initiate and confirm a transaction with these partners.

Platform Infrastructure Providers: hbaju's hosting, content delivery, and DDoS protection infrastructure is managed by enterprise cloud service providers. These providers process technical server logs and network traffic data as part of delivering a secure and performant platform. Infrastructure providers are bound by contractual data processing terms and do not have access to player personal data beyond what is technically incidental to service delivery.

Analytics Services: hbaju uses anonymised, aggregated analytics tools to understand platform usage patterns. Analytics providers receive only non-personally-identifiable, aggregated data. Individual player profiles are never passed to analytics services.

Links to External Websites: hbaju.net does not contain links to external third-party websites in its standard navigation. If you independently navigate to a third-party site from your browser, that site's privacy policy governs the data it collects, and hbaju bears no responsibility for external sites' data practices.

hbaju reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Policy, we will:

• Update the "Last Updated" date shown at the top of this page.
• Display a notice on the hbaju platform informing players that the Privacy Policy has been revised.
• Where the change materially affects how we process your personal data, send a notification to the email address registered to your account at least 14 days before the change takes effect.

Your continued use of hbaju after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with any amendment to this Policy, you must cease using hbaju and may request account closure and data deletion by contacting [email protected].

Children and Minors: hbaju is strictly a platform for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has registered on hbaju, please contact [email protected] immediately so that we can verify the account and take appropriate action, including account closure and data deletion if confirmed.

Governing Language: This Privacy Policy is written in English. In the event of any translation being made available for convenience, the English version shall take precedence in all cases of ambiguity or inconsistency.

Contact for Privacy Matters: All privacy-related inquiries, data rights requests, and complaints should be directed to the hbaju Data Support team at the address below. We aim to respond to all privacy enquiries within five business days and to resolve data rights requests fully within 30 calendar days of receipt.