Privacy Policy — hbeej

1Data We Collect

hbeej collects personal data from players across Bangladesh in order to provide, operate, and continuously improve the hbeej online casino and sports betting platform. We collect only the data that is necessary for these purposes and do not engage in speculative or excessive data collection. The categories of personal data we collect are set out below.

1.1 Registration Data

When you create a hbeej account, we collect your full legal name as it appears on your National ID Card (NID) or passport, your date of birth, your residential address in Bangladesh, a valid email address, and a valid Bangladesh mobile number. This information forms the core of your player profile and is required to open and maintain an account.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to enforce our strict 18+ age restriction, we collect copies of government-issued identity documents including your National ID Card (NID) or valid passport. We may also request proof of residential address in the form of a utility bill or bank statement dated within the past 90 days. These documents are stored in an encrypted vault with restricted access and are used solely for identity and age verification purposes.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or any other supported payment method, we record the transaction reference number, the amount, the date and time, and the payment method used. We do not store your mobile banking PIN, full mobile financial service account number, or any authentication credentials associated with your payment account. All payment data is handled in strict accordance with the security standards described in Section 5.

1.4 Gameplay and Betting Data

We record details of all bets placed, games played, casino sessions, and sports betting activity conducted through your hbeej account. This includes the type of game or market selected, stake amounts, outcomes, session duration, and bonus usage. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement.

1.5 Technical and Device Data

We automatically collect certain technical data when you access the hbeej platform, including your IP address, device type and model, operating system and version, browser type and version, and session timestamps. This data is used for fraud prevention, security monitoring, and to optimise the hbeej experience across different devices used by players in Dhaka, Chittagong, Sylhet, and across Bangladesh.

1.6 Communications Data

If you contact hbeej support via live chat or email, we retain records of those communications, including the subject matter, the content of messages, and the resolution status. This data is used for quality assurance, staff training, and to maintain a history of player interactions for reference in the event of future queries or disputes.

2How We Use Your Data

hbeej processes your personal data only for legitimate and clearly defined purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which we process your personal data are as follows.

• Account Management: To create, operate, and maintain your hbeej account, including processing deposits, settling bets, crediting winnings, and managing your account balance in Bangladeshi Taka.
• Identity and Age Verification: To verify that you are who you say you are and that you are aged 18 years or older, in compliance with our responsible gaming obligations and our strict 18+ policy.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported Bangladeshi payment methods, and to maintain accurate records of all financial transactions on your account.
• Fraud and Money Laundering Prevention: To detect and prevent fraud, bonus abuse, collusion, money laundering, and other prohibited conduct as defined in our Terms & Conditions. This includes automated risk-scoring of account activity and manual review by our security team.
• Responsible Gaming: To monitor player behaviour for indicators of problem gambling and to enforce deposit limits, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gaming Policy.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of our communications with you for quality assurance purposes.
• Platform Improvement: To analyse aggregated, anonymised gameplay and technical data to improve the performance, security, and user experience of the hbeej platform.
• Promotional Communications: Where you have opted in to marketing communications, to send you information about hbeej promotions, seasonal offers (such as Eid specials, Pohela Boishakh promotions, BPL cricket offers), and platform updates. You may opt out of marketing communications at any time.

3Data Sharing & Disclosure

hbeej does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes under any circumstances. We share your personal data only in the limited circumstances described in this section, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, hbeej shares the minimum necessary transaction data with your chosen mobile financial service provider (bKash, Nagad, Rocket, Upay) or bank (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or any other institution you have nominated). This sharing is essential for the completion of financial transactions and is governed by the privacy policies of the respective payment service providers.

3.2 Game Content Providers

hbeej partners with leading international game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver casino games and live dealer experiences. These providers may receive anonymised session data for the purpose of game performance monitoring and fair play certification. They do not receive your name, contact details, payment information, or identity documents.

3.3 KYC and Fraud Prevention Services

hbeej may engage third-party identity verification and fraud prevention services to assist with KYC processing and security monitoring. These service providers act as data processors on our behalf and are contractually bound to process your data only in accordance with our instructions and this Privacy Policy.

3.4 Legal and Regulatory Disclosure

hbeej may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. In such cases, hbeej will disclose only the minimum data required to satisfy the legal obligation.

4Cookies & Tracking Technologies

hbeej uses cookies and similar tracking technologies to ensure that the platform functions correctly, to protect the security of your session, and to understand how players interact with the site so that we can make improvements. We do not use third-party advertising cookies or cross-site tracking technologies.

4.1 Essential Cookies

Essential cookies are strictly necessary for the hbeej platform to function. They maintain your login session, remember your language and currency preferences, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without rendering the platform unusable, and they do not collect personally identifiable information beyond what is required for session management.

4.2 Analytics Cookies

hbeej uses first-party analytics cookies to collect aggregated, anonymised data about how players navigate the platform. This includes which pages are visited most frequently, how long sessions last, and which features are used. This information helps us improve the platform experience for players across Bangladesh. Analytics data is not linked to your individual identity.

4.3 Security Cookies

Security cookies are used to detect and prevent fraudulent activity, including bot traffic, automated account creation, and credential stuffing attacks. These cookies record device fingerprint signals that help our fraud prevention systems distinguish legitimate players from automated threats. Security cookie data is retained for the duration of your session and a short rolling period thereafter for fraud analysis.

4.4 Managing Your Cookie Preferences

You can manage cookie preferences through your browser settings at any time. Most modern browsers allow you to view, block, or delete cookies. Please note that blocking essential cookies will prevent you from logging in and using key hbeej features. For detailed guidance on managing cookies in your browser, consult your browser's official help documentation.

5Data Security

hbeej takes the security of your personal data seriously and implements a layered set of technical and organisational security measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.

• 256-bit SSL/TLS Encryption: All data in transit between your device and hbeej servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your personal, financial, and gameplay data cannot be intercepted in transit.
• Encrypted Data Storage: Personal data stored on hbeej servers — including KYC documents, payment references, and account credentials — is encrypted at rest using AES-256 encryption. Raw plaintext storage of sensitive personal data is not permitted under our internal data handling policy.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. hbeej staff members are granted access to personal data only to the extent required to perform their specific job functions. All staff access is logged and audited.
• Password Security: Account passwords are stored as salted cryptographic hashes. hbeej staff cannot view your password in plain text. You are responsible for choosing a strong, unique password and keeping it confidential.
• Fraud Monitoring: hbeej operates continuous fraud and anomaly detection systems that monitor for unusual account activity, including unexpected login locations, rapid bet sequences, and abnormal withdrawal patterns. Suspicious activity triggers an immediate security review.
• Incident Response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, hbeej will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.

6Data Retention

hbeej retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes that may arise. The following table summarises our standard data retention periods by category.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated analytical purposes, as it can no longer be linked to any individual.

If you request deletion of your personal data prior to the end of a mandatory retention period, hbeej will suppress the data from active use and active systems but may be required to retain an archived copy for the minimum legally mandated period before final deletion.

7Your Privacy Rights

As a hbeej player, you have a number of rights in relation to the personal data we hold about you. hbeej is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our support team via live chat or by emailing our support address (displayed in the footer as plain text).

hbeej will not charge a fee for handling privacy rights requests in ordinary circumstances. If a request is manifestly unfounded, repetitive, or excessive, hbeej reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for doing so.

8Policy Updates & Contact

hbeej reviews this Privacy Policy on a regular basis to ensure that it remains accurate, up to date, and reflective of our current data practices. When we make material changes to this Policy — that is, changes that substantively affect your rights or the way we process your personal data — we will notify active account holders via in-platform messaging or by email to the address registered on your account.

Minor changes, such as clarifications of existing practices or corrections to typographical errors, will be made without individual notification, though the updated Policy will always be accessible on this page with a revised effective date prominently displayed at the top of the document and in the sidebar.

Your continued use of the hbeej platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should cease using hbeej and close your account. Any personal data collected prior to your account closure will be retained in accordance with the retention periods set out in Section 6.

8.1 How to Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about the way hbeej handles your personal data, please contact our support team directly. Our support team is available 24 hours a day, 7 days a week via live chat through the hbeej platform. You may also reach us by email at the support address displayed in the footer of this page. All privacy-related communications are handled by our dedicated data protection staff and will receive a substantive response within 14 working days.

hbeej is committed to resolving privacy concerns fairly and promptly. If you are not satisfied with our response to a privacy complaint, you may have additional recourse through applicable data protection mechanisms. We encourage you to contact us first so that we have the opportunity to address your concerns directly before any third-party escalation.