h baje Privacy Policy — Your Data, Protected

1. Information We Collect

1.1 Information You Provide Directly

When you create and use an h baje account, you provide personal information directly to the Platform. This includes the following categories of data:

• Identity data: your full legal name, date of birth, and national identity document number (NID or passport number) as provided during registration and KYC verification
• Contact data: your Bangladeshi mobile phone number and, where provided, an email address
• Address data: your residential address in Bangladesh, which may be verified against utility bills or bank statements during KYC
• Payment data: transaction records, payment method identifiers (such as the mobile number associated with your bKash or Nagad account), and deposit and withdrawal history — note that h baje does not store full mobile wallet PINs or bank passwords
• Account credentials: your chosen username and a hashed (encrypted) version of your account password
• Communication data: the content of any messages you send to the h baje support team via live chat, email, or WhatsApp

1.2 Information Collected Automatically

When you access the h baje platform, certain technical information is collected automatically by our systems, including:

• Your IP address and approximate geographic location derived from it
• Device type, operating system version, and browser type and version
• Pages visited , time spent on each page, and navigation paths within the platform
• Session timestamps, including login and logout times expressed in Bangladesh Standard Time (BST, UTC+6)
• Device fingerprint data used to detect duplicate account creation or fraudulent access attempts
• Referral source (i.e., how you arrived at the h baje website)

1.3 Information from Third Parties

In certain circumstances, h baje may receive information about you from third parties. This can include confirmation of a payment transaction from bKash, Nagad, Rocket, Upay, or a Bangladeshi bank; identity verification results from a KYC service provider; and fraud or sanctions screening results from a compliance data partner. Any such information is used solely for the purpose for which it was received and is handled in accordance with this Privacy Policy.

2. How We Use Your Information

2.1 To Operate Your Account

The primary purpose for which h baje processes your personal data is the delivery of the services you have requested — namely the operation of your player account, processing of deposits and withdrawals in Bangladeshi Taka (৳), provision of access to casino games and sports betting markets, and fulfilment of any bonuses or promotions you have claimed. Without this data, h baje cannot provide these services to you.

2.2 Identity Verification and Fraud Prevention

h baje uses your identity and payment data to verify that you are who you claim to be, to confirm that you meet the minimum age requirement of 18 years, to detect and prevent fraudulent activity, and to ensure that no individual holds more than one active account on the platform. This processing is necessary to protect both the platform and its players from financial crime and abuse.

2.3 Legal and Regulatory Compliance

Certain processing of your personal data is required for h baje to meet its legal obligations. This includes maintaining records of financial transactions for audit purposes, responding to lawful requests from regulatory or law enforcement authorities, and fulfilling any reporting obligations imposed by applicable law. h baje will not disclose your data to any government body unless it is legally compelled to do so.

2.4 Platform Improvement and Analytics

Anonymised and aggregated data derived from player activity on the h baje platform is used to analyse usage patterns, identify technical issues, and improve the overall user experience. This analysis does not identify you personally and is not shared with external parties in a form that could be used to identify you.

2.5 Customer Support

When you contact the h baje support team, the content of your communication — along with relevant account data — is used to diagnose and resolve your query. Support interactions are logged and may be reviewed for quality assurance purposes. Support agents are trained to handle all player data with strict confidentiality.

2.6 Responsible Gaming Monitoring

h baje uses account activity data to identify patterns that may indicate problematic gambling behaviour, such as unusual increases in deposit frequency or session duration. Where such patterns are detected, the Platform may proactively contact the player with information about responsible gaming tools available on h baje, including deposit limits, time-out periods, and self-exclusion options. This processing is conducted in the best interests of our players and forms part of h baje's responsible gaming obligations. Full details of these tools are available on the Responsible Gaming page.

3. Data Sharing and Third Parties

3.1 Payment Processors

To process deposits and withdrawals, h baje shares the minimum necessary transaction data with the relevant payment provider — for example, bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank. This data is limited to what is required to execute the transaction and is governed by the payment provider's own privacy policy and security standards.

3.2 KYC and Compliance Providers

h baje may engage third-party service providers to assist with identity verification (KYC), fraud detection, and sanctions screening. These providers process your identity documents and personal data solely on h baje's behalf and under strict contractual obligations that prohibit them from using your data for any other purpose.

3.3 Game Software Providers

The games available on the h baje platform are powered by third-party software studios including, but not limited to, Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session and game-round data for the purpose of calculating outcomes, detecting technical faults, and auditing game fairness. They do not receive your name, contact details, or payment information.

3.4 Legal Disclosure

h baje may disclose your personal data to a court, regulator, law enforcement agency, or other governmental authority if required to do so by a valid legal order or if h baje reasonably believes that disclosure is necessary to prevent fraud, protect the safety of a person, or fulfil a statutory obligation. Where permitted by law, h baje will notify you of any such disclosure request.

3.5 No Sale of Data

h baje does not sell, rent, barter, or otherwise transfer your personal information to third parties for their own marketing or commercial purposes. Any data sharing arrangement with a third-party service provider is governed by a written data processing agreement that limits the provider to using your data only for the specific purpose for which it was shared.

4. Cookies and Tracking Technologies

4.1 What Cookies We Use

h baje uses the following categories of cookies on its platform:

• Strictly necessary cookies: these are required for the platform to function and cannot be disabled. They include session cookies that keep you logged in during your visit and security cookies that help detect and prevent fraudulent login attempts.
• Functional cookies: these remember your preferences — such as your preferred language setting and notification options — so you do not need to reconfigure them each time you visit.
• Analytics cookies: these collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve the platform and is not linked to your personal identity.

4.2 What We Do Not Use Cookies For

h baje does not use cookies to build advertising profiles, serve targeted advertisements, or share your browsing behaviour with third-party advertising networks. No cross-site tracking cookies are deployed on the h baje platform.

4.3 Managing Cookies

You may manage or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will prevent the h baje platform from functioning correctly, and you may not be able to log in or access your account balance. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your experience.

5. Data Security and Storage

5.1 Security Measures

h baje implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include TLS encryption for all data in transit, hashed storage of account passwords, access controls limiting staff access to player data on a need-to-know basis, regular security assessments of the platform infrastructure, and multi-factor authentication for internal administrative access.

5.2 Data Storage Location

Player data collected by h baje is stored on secure servers. h baje takes reasonable steps to ensure that any third-party data processors used in connection with the platform maintain equivalent security standards to those applied by h baje itself.

5.3 Security Incident Notification

In the event of a data security incident that is likely to result in a significant risk to your rights and interests, h baje will notify affected players as soon as reasonably practicable. Notification will be made via the email address or mobile number registered to your account and will describe the nature of the incident, the data affected, and the steps h baje is taking in response.

6. Your Rights Over Your Data

6.1 Right to Access

You have the right to request a copy of the personal data that h baje holds about you. To make an access request, contact our support team at [email protected] with the subject line "Data Access Request" and include your registered mobile number for verification purposes. h baje will respond to verified access requests within 30 days.

6.2 Right to Correction

If any personal data held by h baje about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details — such as your contact email address — directly through your account settings. For corrections to identity documents or registered name, please contact the support team with supporting documentation.

6.3 Right to Deletion

You may request the deletion of your personal data by contacting h baje support. Please note that h baje is legally required to retain certain records — particularly financial transaction records — for a defined retention period even after your account is closed. Data that h baje is obligated to retain by law cannot be deleted prior to the expiry of that retention period, but it will be securely deleted once the legal retention obligation has been fulfilled.

6.4 Right to Withdraw Consent

Where h baje processes your personal data on the basis of your consent — for example, where you have opted in to receive promotional communications — you have the right to withdraw that consent at any time by contacting the support team or updating your notification preferences within your account settings. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

7. Data Retention Policy

7.1 Active Accounts

For as long as your h baje account remains active, the Platform retains all personal, identity, financial, and account-activity data necessary to operate the account and comply with applicable legal obligations. This data is reviewed periodically and data that is no longer necessary for its original purpose is securely deleted or anonymised.

7.2 Closed Accounts

Following the closure of a player account — whether initiated by the player or by h baje — the Platform retains financial transaction records, identity verification documents, and any records required for legal compliance for a minimum period of five years from the date of account closure. After this period, retained data is securely and permanently deleted from h baje's systems unless a longer retention period is required by law.

7.3 Responsible Gaming Records

Records of self-exclusion requests, deposit limit settings, and responsible gaming support interactions are retained for the lifetime of the account and for a minimum of five years following account closure. This retention is necessary to ensure that self-exclusion and player protection measures are honoured, even if a former player attempts to re-register at a later date.

8. Updates to This Privacy Policy

8.1 How We Notify You of Changes

h baje reviews and updates this Privacy Policy periodically to reflect changes in platform features, legal obligations, or data processing practices. When material changes are made to this Policy, registered players will be notified via the email address or mobile number associated with their account, and the revised Policy will be published on this page with an updated effective date at the top.

8.2 Continued Use as Acceptance

Your continued use of the h baje platform on or after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this Policy, you should cease using the platform and contact the support team to request account closure and deletion of your personal data, subject to our legal retention obligations described in Section 7.

8.3 Contact for Privacy Queries

For any questions, concerns, or formal requests relating to this Privacy Policy or h baje's handling of your personal data, please contact our support team in writing at [email protected]. We aim to respond to all privacy-related enquiries within 10 business days of receipt.