Privacy Policy — hbjaee

01 Information We Collect

When you register an account, use the hbjaee platform, or interact with our support team, we may collect the following categories of personal information:

hbjaee does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a minor, we will delete it promptly and close the associated account in accordance with our eligibility policy.

We may also receive personal data about you from third parties in limited circumstances — for example, fraud prevention agencies, identity verification service providers, or payment processors — where this is necessary to verify your identity or protect the platform from misuse.

02 How We Use Your Data

hbjaee processes your personal data for the following purposes, each of which is supported by a lawful basis as described below:

• Account Management: To create, maintain, and administer your hbjaee account, including processing deposits and withdrawals in Bangladeshi Taka (৳), managing your game history, and handling account security.
• Identity Verification (KYC): To verify your identity and age in compliance with anti-money laundering (AML) obligations and to confirm that you meet the 18+ eligibility requirement before granting full account access.
• Service Delivery: To provide access to casino games, live dealer tables, sports betting markets (including BPL cricket, T20 World Cup, and IPL), crash games, and all other features of the hbjaee platform.
• Payment Processing: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard, and to maintain a complete, accurate record of your financial transactions.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and other security threats. This includes automated monitoring of account activity patterns.
• Responsible Gaming: To monitor play patterns that may indicate problem gambling behaviour, to apply deposit limits or self-exclusion requests you have made, and to comply with our responsible gaming obligations.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 support channels.
• Legal Compliance: To fulfil obligations imposed by applicable law, including responding to lawful requests from regulatory authorities or law enforcement agencies.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have given your consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Platform Improvement: To analyse usage data and player behaviour in aggregate to improve the performance, design, and content of the hbjaee platform.

hbjaee will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

03 Data Sharing & Third Parties

hbjaee does not sell or rent your personal data to third parties. We share personal information only in the limited circumstances described below, and only with parties who are contractually required to handle your data securely and in accordance with applicable data protection standards.

The categories of third parties with whom we may share your data include:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are independently responsible for their data processing activities.
• Game Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as a pseudonymous player identifier and session token) to facilitate game delivery. They do not receive your full identity data.
• Identity Verification Services: KYC and AML compliance partners may receive copies of the identity documents you submit in order to verify your eligibility. These partners are selected for their compliance with recognised data security standards.
• Fraud Prevention Agencies: Where we have reasonable grounds to suspect fraudulent activity, we may share relevant account data with fraud prevention and financial intelligence organisations to protect both the platform and other players.
• IT Infrastructure and Hosting Providers: Our platform infrastructure and data storage partners may process your personal data on our behalf as data processors. They act solely on our instructions and are bound by strict data processing agreements.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, a valid court order, or other legal process. We will notify you of such disclosure where we are legally permitted to do so.

04 Cookies & Tracking Technologies

hbjaee uses cookies, web beacons, pixel tags, and similar tracking technologies to operate and improve our platform. A cookie is a small text file that is stored on your device when you visit the hbjaee website or use our mobile application. Cookies help us recognise your session, remember your preferences, and understand how players interact with the platform.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable core features such as account authentication, session management, and security checks. The platform cannot operate without these cookies, and they cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as your chosen language, display settings, and last visited game category — to provide a more personalised experience during your session.
• Analytics Cookies: We use analytics tools to collect aggregated, anonymised data about how players navigate and use the hbjaee platform. This data helps us identify areas for improvement, optimise page performance, and understand which features are most popular.
• Security Cookies: These cookies support our fraud detection systems by helping us identify unusual account activity patterns, such as logins from unfamiliar devices or locations.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will prevent the hbjaee platform from functioning correctly and you will not be able to log in to your account. Please refer to your browser's help documentation for instructions on managing cookies on your specific device.

hbjaee does not use cookies to serve third-party advertising or to build profiles for sale to advertising networks. Any analytics data collected is used solely to improve the hbjaee platform itself.

05 Data Security & Storage

hbjaee applies a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and hbjaee's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted Data Storage: Sensitive fields including passwords, financial account references, and identity document scans are stored in encrypted form. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Access Controls: Access to personal data is restricted to authorised hbjaee personnel on a strict need-to-know basis. Role-based access controls are enforced across all internal systems that process personal data.
• Audit Logging: All internal access to personal data is logged. Access logs are reviewed regularly by our security team to detect and investigate any anomalous access patterns.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security. Our administrative systems also enforce multi-factor authentication for all personnel with access to player data.
• Vulnerability Management: hbjaee's technical infrastructure is subject to regular security reviews. Identified vulnerabilities are prioritised and remediated in accordance with their severity rating.

Despite the measures we have in place, no digital platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, hbjaee will notify affected players promptly and take all reasonable steps to limit the impact of the breach.

06 Your Data Rights

As a player registered with hbjaee, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a description of your request and sufficient information to verify your identity.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed. We will respond to verified access requests within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your hbjaee account settings.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to limitations — for example, we are required to retain certain transaction records and identity documents for anti-money laundering compliance purposes for a period defined by applicable law, even after account closure.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where technically feasible, you may request a copy of the personal data you have provided to hbjaee in a structured, commonly used, machine-readable format.
• Right to Object to Marketing: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may opt out of marketing emails and SMS messages by contacting [email protected] or by using the unsubscribe link included in every marketing communication.
• Right to Withdraw Consent: Where hbjaee processes your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing that took place prior to the withdrawal.

hbjaee will not charge a fee for handling data rights requests in ordinary circumstances. We may decline requests that are manifestly unfounded, excessively repetitive, or that conflict with our legal obligations — in which case we will provide a written explanation.

07 Data Retention

hbjaee retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active Account Data: Personal data associated with an active hbjaee account is retained for the full duration of the account relationship and for a period of up to five (5) years following account closure, to meet our AML and legal compliance obligations.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years following the date of each transaction, in accordance with financial record-keeping requirements.
• KYC Verification Documents: Identity documents submitted during the KYC process are retained for the duration of the account relationship and for up to five (5) years post-closure, subject to any extended retention requirements imposed by applicable law.
• Support Communications: Customer support correspondence and complaint records are retained for up to three (3) years following the resolution of the relevant enquiry or complaint.
• Marketing Opt-Out Records: Records of marketing opt-out requests are retained indefinitely to ensure that opt-out preferences are respected on an ongoing basis.
• Technical and Usage Data: Aggregated, anonymised usage and analytics data may be retained indefinitely for platform improvement purposes, as it can no longer be attributed to any individual player once anonymised.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with hbjaee's internal data disposal procedures. Where data deletion is technically complex — for example, in backup archives — we ensure that such data is rendered inaccessible and not used for any active processing purpose pending its routine deletion cycle.

08 Policy Updates & Contact

hbjaee reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform services. When material changes are made, we will notify registered players by email or via an in-platform notification prior to the changes taking effect. The revised Privacy Policy will be published on this page with an updated effective date.

We encourage you to review this page periodically to stay informed about how hbjaee handles your personal data. Your continued use of the hbjaee platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact our support team:

• Email: [email protected]
• Response Time: We aim to respond to all privacy-related enquiries within five (5) business days of receipt.
• Language: Correspondence may be submitted in English. Our support team will respond in English.