hbazi Privacy Policy — How We Handle Your Personal Data

hbazi ("we", "us", "our") operates the online casino and sports betting platform at hbazi.vu (the "Platform"). We are committed to protecting the personal data of all users who visit, register with or use our Platform. This Privacy Policy sets out the basis on which personal data we collect from you, or that you provide to us, will be processed by hbazi.

This Privacy Policy applies to all personal data collected through the Platform, including data provided during account registration, deposits and withdrawals, customer support interactions, and general browsing of the Platform. By registering an account at hbazi, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein.

Information You Provide Directly

When you register an account, use the Platform or contact our support team, you provide us with personal data that may include:

• Full legal name and date of birth as submitted during registration or identity verification (KYC).
• Bangladesh mobile number used for account registration and two-factor authentication.
• Payment account details — specifically the mobile banking number (bKash, Nagad, Rocket or Upay) registered to your hbazi account for deposit and withdrawal purposes.
• Identity documents submitted for KYC verification, such as a National Identity Card (NID) scan or passport photograph.

Information Collected Automatically

When you access the Platform, we automatically collect certain technical data about your device and browsing behaviour. This includes:

• IP address and approximate geolocation (country and city level, not precise location) used for fraud prevention and regulatory compliance checks.
• Device type, operating system version, browser type and version — used to optimise the Platform's performance across different handsets including popular Android devices used in Bangladesh.
• Session data including pages visited, time spent on each section, games launched and betting activity — used to improve platform features and personalise your experience.
• Cookie identifiers and similar tracking technologies — see Section 7 (Cookies and Tracking) for full details.

Information from Third Parties

In some circumstances hbazi may receive information about you from third parties. This may include identity verification data from KYC service providers, payment verification data from mobile banking operators such as bKash and Nagad, and fraud prevention signals from specialised anti-fraud data services. Information received from third parties is used only for the specific purpose for which it was shared and is handled with the same care as data you provide directly.

hbazi uses your personal data for the following purposes:

• Account creation and management — to register your account, verify your identity, authenticate your login sessions and manage your account profile.
• Payment processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay and other supported payment methods, and to verify that payment accounts are registered in your name.
• Platform delivery — to provide access to casino games, sports betting markets, promotions and all other features of the Platform, and to personalise your experience based on your activity and preferences.
• Fraud prevention and security — to detect and prevent fraudulent activity, money laundering, use of stolen payment credentials, underage gambling, and other prohibited conduct on the Platform.
• Responsible gaming compliance — to monitor gaming patterns and enforce responsible gaming tools including deposit limits, session time-outs and self-exclusion periods as requested by players or required by our responsible gaming policy.
• Communications — to send you account-related notifications such as deposit confirmations, withdrawal updates and security alerts via SMS to your registered Bangladesh mobile number. If you have opted in to marketing, we may also send promotional offers — you can opt out at any time.

hbazi processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity — processing required to perform the contract between you and hbazi (i.e., the Terms and Conditions), including account management, payment processing and game delivery.
• Consent — where you have given your explicit consent to specific processing activities, such as receiving promotional communications. Consent may be withdrawn at any time.
• Legitimate interests — where hbazi has a legitimate business interest in processing your data that is not overridden by your privacy rights, such as fraud prevention, platform security and responsible gaming monitoring.
• Legal obligation — where processing is required to comply with a legal or regulatory obligation, including anti-money laundering obligations, age verification requirements and fraud reporting duties.

hbazi does not sell your personal data. We may share your personal data with third parties only in the following limited circumstances:

• Payment processors and mobile banking operators — including bKash, Nagad, Rocket and Upay — who require your registered mobile number and transaction amount to process deposits and withdrawals on your behalf.
• KYC and identity verification service providers — who process your identity document scans to verify your age and identity as required by our responsible gaming and anti-fraud policies.
• Game content providers — including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt and Microgaming — who may receive session tokens and anonymised game identifiers necessary to deliver their games on the Platform. These providers do not receive your full personal profile.
• Law enforcement and regulatory authorities — where hbazi is required by law, court order or regulatory authority to disclose personal data. In such circumstances hbazi will disclose only the minimum data required to fulfil the legal obligation.

hbazi takes the security of your financial data with the utmost seriousness. When you make a deposit or withdrawal via bKash, Nagad, Rocket or Upay, the transaction is initiated through the respective mobile banking platform's own secure interface. hbazi records the transaction amount, the associated mobile number, the transaction reference number and the timestamp for account management and dispute resolution purposes. hbazi does not store full card numbers, CVV codes or mobile banking PINs. Card transactions via Visa or Mastercard are handled by a PCI-compliant payment gateway; hbazi receives only a tokenised reference and the transaction outcome.

Transaction records are retained for a minimum of five years from the date of the transaction in accordance with standard financial record-keeping practice. This retention period may be extended where records are relevant to an ongoing investigation, dispute or legal proceeding. After the applicable retention period, transaction records are securely deleted from hbazi systems.

The hbazi platform uses cookies and similar technologies to operate correctly, remember your preferences, maintain your login session, and gather analytical data about how the Platform is used. A cookie is a small text file stored on your device by your web browser when you visit the Platform.

We use the following categories of cookies on the Platform:

• Strictly necessary cookies — required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without breaking the Platform's core functionality.
• Functional cookies — used to remember your preferences such as your chosen language version and preferred game categories, so you do not have to reset these settings each time you visit the Platform.
• Analytical cookies — used to collect anonymised data about which pages are visited most frequently, how long users spend on each section, and which games are most popular. This data is used to improve the Platform. Analytical cookies do not identify you personally.

hbazi retains your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable law. The following general retention periods apply: account registration data is retained for the duration of your account and for a minimum of five years after account closure; KYC identity documents are retained for a minimum of five years from the date of submission; payment transaction records are retained for a minimum of five years from the date of transaction; support correspondence is retained for two years from the date of the last interaction.

Where personal data is no longer required for its original purpose and no legal retention obligation applies, hbazi will securely delete or anonymise the data so that it can no longer be linked to you as an individual. Anonymised analytical data may be retained indefinitely as it can no longer identify any individual.

Subject to applicable law, you have the following rights with respect to your personal data held by hbazi. To exercise any of these rights, please contact the hbazi support team via live chat or email at [email protected]:

• Right of access — you may request a copy of all personal data hbazi holds about you. We will provide this within a reasonable period of receiving your verified request.
• Right to rectification — if any personal data hbazi holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to erasure — you may request that hbazi delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any legal retention obligations that may prevent immediate deletion.
• Right to restrict processing — in certain circumstances you may request that hbazi restricts the processing of your personal data, for example while the accuracy of the data is being contested.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

hbazi implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. All data transmitted between your device and the Platform is protected using SSL (Secure Socket Layer) encryption. Account access is protected by password authentication and optional two-factor authentication via your registered Bangladesh mobile number. Our internal systems apply role-based access controls so that only personnel who require access to your personal data for their job function are able to view it.

Despite these measures, no method of transmission over the internet or method of electronic storage is completely secure. While hbazi strives to use commercially reasonable means to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, hbazi will notify affected users without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

The hbazi platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If you are under 21 years of age, you must not register an account or use the Platform in any way. If hbazi becomes aware that personal data has been collected from a person under 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your child may have accessed or registered with hbazi, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

hbazi reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this policy, we will notify registered users by posting a prominent notice on the Platform or by sending a notification to your registered Bangladesh mobile number. The updated Privacy Policy will take effect immediately upon publication unless a later effective date is specified in the notice.

We encourage you to review this Privacy Policy periodically to stay informed of how hbazi protects your personal data. Your continued use of the Platform following the publication of any changes constitutes your acceptance of the revised Privacy Policy. The current version of this Privacy Policy is always available at hbazi.vu/privacy-policy.

If you have any questions, concerns or complaints about this Privacy Policy or about how hbazi handles your personal data, please contact our dedicated support team. Our team is available 24 hours a day, 7 days a week via the live chat feature on the Platform and can assist in both English and Bangla.

You may also reach us by email at [email protected]