h baj Privacy Policy

1. Information We Collect

h baj collects personal data through several channels during the course of your use of the platform. The categories of data we collect, and the circumstances in which they are gathered, are set out below.

Registration Data

When you create a h baj account, we collect the information you provide during the registration process, including your full legal name, date of birth, mobile telephone number, and the password you choose for your account. This information is required to establish your account identity and verify your eligibility to use the platform.

Identity Verification Data

To comply with our Know Your Customer (KYC) obligations and to protect the platform against fraud, h baj may request and retain copies of identity documents, including national identity cards, passports, driving licences, and proof of address documents such as utility bills or bank statements. Where applicable, we may also retain selfie photographs submitted during the verification process.

Transaction Data

We record all financial transactions associated with your h baj account, including deposit amounts, payment methods used (bKash, Nagad, Rocket, Upay, bank transfers, card payments), withdrawal requests, transaction timestamps, and transaction reference numbers. This data is retained for financial record-keeping, fraud detection, and regulatory compliance purposes.

Usage and Behavioural Data

h baj automatically collects certain technical and behavioural data when you interact with the platform, including:

• IP address and approximate geographic location (city or district level);
• Device type, operating system, and browser version;
• Pages visited, games played, session duration, and click-path data;
• Betting history, wager amounts, and game results;
• Login timestamps and session activity logs.

This data is used to improve platform performance, personalise your experience, detect suspicious activity, and fulfil our responsible gaming obligations.

Communication Data

When you contact h baj support through live chat, email, or WhatsApp, we retain a record of those communications, including the content of messages exchanged and the date and time of contact. This enables us to maintain service continuity and resolve disputes accurately.

2. How We Use Your Data

h baj uses the personal data we collect for defined, legitimate purposes only. We do not process your data in ways that are incompatible with the purposes stated at the time of collection. The principal purposes for which your data is processed are as follows:

• Account Management: To create, maintain, and administer your h baj account, including processing login requests, updating your profile, and handling account-related notifications.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels, and to maintain accurate financial records of all account activity.
• Identity Verification: To verify that you are who you claim to be, that you meet the minimum age requirement of 18 years, and that the payment methods you use are registered in your own name.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other activities that violate our Terms & Conditions or applicable law.
• Responsible Gaming: To monitor betting patterns, identify signs of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and fulfil our duty of care to players.
• Customer Support: To respond to your enquiries, resolve complaints, and maintain a record of support interactions for quality assurance purposes.
• Legal and Regulatory Compliance: To fulfil obligations under applicable laws and regulations, including record-keeping requirements and responses to lawful requests from authorities.
• Platform Improvement: To analyse aggregate usage data, identify technical issues, and make improvements to the h baj platform's performance and user experience.
• Promotional Communications: Where you have not opted out, to inform you of relevant offers, bonuses, and promotions available on h baj. You may opt out of marketing communications at any time by contacting our support team.

3. Data Sharing & Third Parties

h baj does not sell, rent, or otherwise transfer your personal data to third parties for their independent commercial use. However, in order to operate the platform effectively, certain categories of personal data are shared with trusted third-party partners who process data on our behalf and under our instruction. All such third parties are bound by contractual obligations to process your data securely and only for the purposes specified by h baj.

Categories of Third-Party Recipients

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• Identity Verification Partners: Third-party KYC service providers may process identity document images and verification data on our behalf to confirm account holder eligibility.
• Game Software Providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive session and game-play data necessary to deliver their game content on the h baj platform. These providers are established, regulated entities operating under their own data agreements.
• IT Infrastructure and Security Partners: Cloud hosting providers, cybersecurity monitoring services, and fraud detection systems may process certain technical and account data as part of their service delivery.
• Legal and Regulatory Authorities: h baj will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a lawful request, court order, or binding legal obligation under Bangladeshi law.

International Data Transfers

Some of the third-party providers used by h baj may be located outside of Bangladesh. Where personal data is transferred internationally, h baj takes reasonable steps to ensure that appropriate data protection safeguards are in place, consistent with the requirements of applicable data protection principles. Where no adequacy decision applies, h baj relies on contractual data protection clauses with the relevant third parties.

4. Cookies & Tracking Technologies

h baj uses cookies and similar browser-based tracking technologies to ensure the platform functions correctly and to improve your experience. A cookie is a small text file placed on your device by your web browser when you visit the h baj platform. Cookies do not contain executable code and cannot install software on your device.

Types of Cookies Used

h baj does not use third-party advertising cookies or behavioural retargeting trackers. You may configure your browser settings to refuse or delete cookies. Please note that disabling essential cookies will impair the functionality of the h baj platform, including the ability to remain logged in to your account.

5. Data Retention & Storage

h baj retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal and regulatory obligations. The retention periods applicable to the principal data categories are as follows:

• Account Registration Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with financial record-keeping requirements.
• Identity Verification Documents: Retained for five (5) years following account closure or the completion of the KYC process, whichever is later.
• Transaction Records: Retained for a minimum of seven (7) years following the date of each transaction, consistent with standard financial compliance obligations.
• Support Communications: Retained for three (3) years following the date of the last interaction, unless an ongoing dispute requires extended retention.
• Usage and Behavioural Data: Aggregated and anonymised data may be retained indefinitely for platform analytics purposes. Individually identifiable usage logs are retained for up to two (2) years.

Storage Location and Security

Your personal data is stored on secure servers protected by industry-standard physical and logical access controls. h baj employs encryption at rest for sensitive data categories including identity documents and payment information. Access to personal data within h baj is restricted on a need-to-know basis, with role-based access controls enforced across all internal systems.

Upon the expiry of the applicable retention period, personal data is either permanently deleted using secure erasure methods or anonymised such that it can no longer be linked to any individual, and anonymised data may be retained for statistical analysis.

6. Your Rights Over Your Data

As a user of the h baj platform, you hold a number of rights with respect to the personal data we process about you. These rights are described below, along with the process for exercising them. h baj will respond to all valid data requests within thirty (30) days of receipt.

To exercise any of the following rights, please contact the h baj support team via live chat or by emailing [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing a request to protect against unauthorised access to your data.

7. Security of Your Personal Data

h baj takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the h baj platform;
• Encryption at rest for sensitive data categories stored on our servers, including identity documents and payment credentials;
• Role-based access controls ensuring that only authorised h baj personnel can access personal data, and only to the extent necessary for their role;
• Regular security audits and vulnerability assessments of the h baj platform infrastructure;
• Multi-factor authentication options available to users for additional account security;
• Automated monitoring systems designed to detect and alert on anomalous account activity in real time;
• Secure data deletion procedures for personal data that has reached the end of its retention period.

While h baj employs robust security practices, no digital platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your h baj login credentials and for notifying h baj support immediately if you suspect unauthorised access to your account. In the event of a data security incident that materially affects your personal data, h baj will notify affected users in accordance with applicable legal requirements.

8. Policy Updates & Contact

h baj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. The effective date of the current version is displayed at the top of this page. We will endeavour to notify registered users of material changes to this policy via the mobile number or email address associated with their h baj account. Continued use of the h baj platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms.

Children's Privacy

The h baj platform is strictly intended for adults aged 18 and above. h baj does not knowingly collect personal data from individuals under the age of 18. If h baj becomes aware that personal data has been collected from a minor, that data will be deleted promptly and the associated account will be permanently closed. If you believe a minor has registered on the h baj platform, please contact our support team immediately.

Links to Third-Party Platforms

The h baj platform may contain references to third-party payment providers and game studios. This Privacy Policy applies solely to the h baj platform itself. h baj is not responsible for the privacy practices of third-party platforms, and we encourage you to review the privacy policies of any external services you use in connection with h baj, including bKash, Nagad, and Rocket.

Contact Our Data Team

For all privacy-related enquiries, data rights requests, or concerns about how h baj processes your personal data, please contact us using the following details. All correspondence will be handled confidentially and responded to within 30 days.

Email: [email protected]
Live Chat: Available 24/7 via the h baj platform
Subject Line: "Privacy & Data Request" (for data rights requests)
Response Time: Within 30 calendar days of receipt of a valid request