hbija Privacy Policy

1 Data Controller Information

hbija ("we", "us", "our") is the data controller responsible for the personal information collected through the hbija.net platform. As data controller, hbija determines the purposes and means by which your personal data is processed in connection with your use of our online betting and casino services.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hbija handles your personal data, you may contact our dedicated data protection team using the details below:

This Privacy Policy applies to all personal data collected through hbija.net, our mobile-optimised site, any related sub-domains, and all communications hbija initiates with you via email, SMS, or live chat. It does not apply to third-party websites or services that may be linked from our platform — we encourage you to review the privacy policies of any external services you access independently.

2 Information We Collect

hbija collects personal data through a number of channels, including account registration, identity verification, transaction processing, customer support interactions, and your general use of the platform. The categories of data we collect are described below.

2.1 Information You Provide Directly

• Identity data: Full name, date of birth, gender, and national identity card or passport number (collected during KYC verification).
• Contact data: Email address, mobile phone number, and residential address (including district and division within Bangladesh).
• Account credentials: Username and encrypted password used to access your hbija account.
• Financial data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details (where applicable), deposit and withdrawal transaction records.
• Verification documents: Copies of government-issued identity documents, proof of address, and selfies submitted for KYC verification purposes.
• Communications data: Records of your interactions with hbija's support team via live chat, email, or any other channel.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language settings.
• Usage data: Pages visited, games played, bets placed, betting history, session duration, click patterns, and navigation paths through the hbija platform.
• Location data: Approximate geographic location inferred from your IP address, used to detect access from restricted jurisdictions and to personalise your platform experience.
• Cookie and tracking data: Information collected via cookies, web beacons, and similar technologies as described in Section 5 of this policy.

2.3 Information From Third Parties

hbija may receive personal data about you from third-party sources in specific circumstances, including identity verification providers (for KYC checks), payment processors (for transaction confirmation and fraud screening), and analytics partners (for platform performance data in aggregated, non-identifiable form).

3 Lawful Basis for Processing

hbija processes your personal data on the following lawful bases, depending on the specific purpose and type of data involved:

4 How We Use Your Data

hbija uses the personal data it collects for the following specific purposes:

4.1 Account Operations

Your identity, contact, and credential data is used to create and maintain your hbija account, authenticate your logins, and enable you to access the full range of betting and casino services available on the platform. Without this data, hbija cannot provide you with a personalised account experience.

4.2 Transaction Processing

Financial data and payment method details are used exclusively to process your deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, and other accepted payment channels. Transaction records are retained to facilitate dispute resolution and comply with applicable financial record-keeping requirements.

4.3 Identity Verification and Compliance

hbija is required to verify the identity and age of all users as part of its anti-money laundering (AML) and responsible gaming commitments. KYC documentation is processed by hbija and its appointed verification partners solely for this purpose. Your verification status is stored securely and associated with your account record.

4.4 Personalisation and Platform Improvement

Usage and behavioural data collected during your sessions on hbija helps us to improve the platform, personalise game recommendations, optimise the display of promotions relevant to your interests, and identify and fix technical issues. This processing is carried out on an aggregated or pseudonymised basis wherever possible.

4.5 Fraud Prevention and Security

Technical and usage data, including IP address, device fingerprinting, and behavioural patterns, is analysed by hbija's automated fraud detection systems to identify and prevent unauthorised access, multi-account activity, bonus abuse, money laundering, and other prohibited conduct as described in hbija's Terms & Conditions.

4.6 Responsible Gaming

hbija monitors certain behavioural indicators — such as significant changes in deposit frequency, session length, or self-exclusion history — to support its responsible gaming obligations and to proactively reach out to users who may be showing signs of problem gambling. For more information, please visit our Responsible Gaming page.

4.7 Marketing Communications

With your consent, hbija may use your contact data to send you promotional offers, bonus notifications, tournament announcements, and other marketing communications relevant to cricket betting, slot promotions, live casino events, and seasonal campaigns (including Eid, Pohela Boishakh, and BPL season promotions). You may withdraw your marketing consent at any time by contacting our support team or updating your account preferences.

5 Cookies & Tracking Technologies

hbija uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, analyse platform performance, and deliver a consistent experience across sessions. The following categories of cookies are used on hbija.net:

5.1 Managing Your Cookie Preferences

Most modern browsers allow you to view, manage, and delete cookies through the browser's settings or privacy menu. Please note that disabling strictly necessary cookies will impair the functionality of the hbija platform and may prevent you from logging in or completing transactions. Instructions for managing cookies in commonly used browsers are available in the browser's official support documentation.

6 Data Sharing & Third Parties

hbija does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, to deliver our services effectively and meet our legal obligations, we share specific data with carefully selected third-party service providers under strict data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, solely to facilitate deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party verification specialists engaged to perform age and identity checks in compliance with AML requirements.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who receive session data necessary to deliver their game content within the hbija platform.
• IT infrastructure and hosting providers: Cloud hosting and content delivery network (CDN) partners who store and transmit platform data on hbija's behalf under strict confidentiality terms.
• Fraud detection and security services: Specialist providers who assist hbija in detecting and preventing fraudulent activity and unauthorised access.
• Legal and regulatory authorities: Where required by applicable law, court order, or at the request of a competent regulatory or law enforcement authority, hbija may be required to disclose certain personal data. hbija will inform you of such disclosures where legally permitted to do so.

All third-party service providers who process personal data on hbija's behalf are contractually required to process that data only in accordance with hbija's instructions and this Privacy Policy, and to implement appropriate technical and organisational security measures.

7 Data Retention

hbija retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with the following general retention schedule:

• Account and identity data: Retained for the duration of your active account and for a minimum of 5 years following account closure, to meet anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with applicable financial regulations.
• KYC documentation: Retained for the duration of your account and for 5 years after closure, or longer if required by a competent authority.
• Customer support communications: Retained for 3 years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Marketing preferences and consent records: Retained for as long as your account is active; updated immediately upon any change to your preferences.
• Technical and usage data: Typically retained in identifiable form for up to 12 months, after which it may be anonymised and retained for analytical purposes indefinitely.

When the applicable retention period expires, your personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical constraints (for example, data held in backup systems), hbija will isolate the data from active processing until deletion is completed.

8 Security Measures

hbija takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and hbija's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted password storage: Account passwords are stored as salted cryptographic hashes — hbija staff cannot view your password in plain text under any circumstances.
• Access controls: Access to personal data within hbija's internal systems is restricted on a strict need-to-know basis, with role-based access controls and audit logging for all data access events.
• Two-factor authentication (2FA): hbija offers SMS-based two-factor authentication as an optional but strongly recommended additional layer of security for your account login.
• Intrusion detection and monitoring: hbija's systems are monitored continuously for suspicious activity, and automated alerts are triggered by anomalous access patterns.
• Regular security audits: hbija conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in the platform's infrastructure.

9 Your Data Rights

As a user of hbija, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". hbija will respond to verified requests within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data hbija holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data hbija holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to hbija's legal retention obligations (see Section 7). Please note that hbija cannot delete data it is legally required to retain.
• Right to restrict processing: In certain circumstances, you may request that hbija restricts the processing of your personal data while a complaint or query is being resolved.
• Right to data portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to hbija, where technically feasible.
• Right to object: You have the right to object to processing based on hbija's legitimate interests, including profiling for marketing purposes. Upon receipt of a valid objection, hbija will cease that specific processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where hbija processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10 Changes to This Policy

hbija reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, hbija will publish the updated policy on this page with a revised "Last Updated" date and, where practicable, notify registered users via email or in-platform notification prior to the changes taking effect.

Your continued use of the hbija platform after the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. We encourage you to review this page periodically to stay informed about how hbija protects and handles your personal data.

If you have any questions about this Privacy Policy, or if you are not satisfied with hbija's response to a data rights request, please contact our support team at [email protected]. Our English-language support team is available 24 hours a day, 7 days a week.