Privacy Policy — hbajee 20

hbajee 20 ("we", "us", "our") is committed to protecting the privacy of all individuals who access and use the hbajee 20 platform at hbajee-20.app ("the Platform"). This Privacy Policy describes in detail the categories of personal data we collect, the lawful bases on which we process that data, how long we retain it, with whom we share it, and the rights available to you as a data subject. This policy applies to all users of the Platform, including visitors who browse without registering and registered members who deposit, wager, and withdraw funds.

By accessing the Platform, creating a hbajee 20 account, or placing a wager, you confirm that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not agree with any aspect of this policy, you must discontinue your use of the Platform immediately.

1 Information We Collect

hbajee 20 collects personal data from you in two primary ways: data you provide directly to us, and data we collect automatically as you interact with the Platform. The categories of data we collect are described in detail below.

1.1 Data You Provide Directly

When you register a hbajee 20 account, make a deposit, request a withdrawal, or contact our support team, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and nationality;
• Contact Data: Email address and mobile phone number (used for account verification, OTP codes, and support communications);
• Address Data: Residential address including district, division, and postal code within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh);
• Identity Verification Documents: Scanned copies or photographs of your National Identity Card (NID), passport, or driver's licence, submitted as part of the KYC (Know Your Customer) process;
• Financial Data: Payment method details including mobile wallet account numbers (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) used for deposits and withdrawals — note that full card numbers are never stored by hbajee 20 directly;
• Communications Data: The content of any messages you send to our support team via live chat or email, including any feedback or complaints.

1.2 Data Collected Automatically

When you access the hbajee 20 platform, our systems automatically collect certain technical and behavioural data, including:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone settings;
• Usage Data: Pages visited, games played, bet amounts, session duration, click paths, search queries within the platform, and feature interactions;
• Transaction Data: Records of all deposits, withdrawals, wagers, bonus credits, and account balance movements;
• Cookie and Tracking Data: Data collected via cookies, session tokens, and similar technologies as described in Section 4 of this policy.

2 How We Use Your Data

hbajee 20 processes your personal data only for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below. The table below summarises the key purposes for which we process your data and the legal basis for each:

hbajee 20 will never use your personal data to make fully automated decisions that produce significant legal effects on you without providing you the opportunity to request human review of such a decision. Where automated processes are used for fraud screening, our compliance team reviews all flagged cases manually before any account action is taken.

3 Data Sharing and Disclosure

hbajee 20 does not sell, rent, or otherwise commercially transfer your personal data to any third party. We may, however, share your personal data with the following categories of recipient in the circumstances described below:

• Payment Processing Partners: We share financial transaction data with payment service providers — including bKash, Nagad, Rocket, Upay, and card processors for Visa and Mastercard — strictly to the extent necessary to process your deposits and withdrawals. These providers process your data under their own privacy policies and are bound by contractual data protection obligations with hbajee 20.
• Game Content Providers: When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, certain session data (e.g., player session token, bet amounts, game outcomes) is transmitted to those providers to facilitate gameplay. No directly identifiable personal data such as your full name, address, or NID number is shared with game studios.
• Analytics and Platform Infrastructure Providers: We use third-party technology providers for hosting, content delivery, and anonymised platform analytics. These providers act as data processors on our behalf and are contractually prohibited from using your data for their own purposes.
• Law Enforcement and Regulatory Authorities: hbajee 20 may be required to disclose personal data to government authorities, law enforcement agencies, or financial regulators where required or permitted to do so by applicable law. We will only disclose the minimum data necessary to comply with a valid legal request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a substantial part of the hbajee 20 business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change to this Privacy Policy that may result from it.

4 Cookies and Tracking Technologies

hbajee 20 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and understand how players interact with our services. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used by hbajee 20:

4.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable core features such as user authentication, session management, account security (including CSRF protection), and the maintenance of your account balance display. Essential cookies cannot be disabled without disrupting your ability to use the Platform. They do not collect any information that could be used to identify you outside of the hbajee 20 platform.

4.2 Functional Cookies

Functional cookies allow the Platform to remember your preferences and settings between sessions, such as your preferred language, currency display format, and notification preferences. These cookies improve the convenience of using hbajee 20 but are not strictly required for core functionality. You may disable functional cookies in your browser settings, though some personalised features may not work as expected if you do so.

4.3 Analytics Cookies

hbajee 20 uses anonymised analytics cookies to understand how players navigate the Platform, which features are most used, and where technical issues occur. This data is collected in aggregate and is not linked to your individual identity. Analytics data helps us improve the performance, stability, and design of the hbajee 20 platform over time.

You can manage your cookie preferences at any time through your browser's built-in settings. Most browsers allow you to view, block, or delete cookies. Please note that disabling essential cookies will prevent you from logging in to your hbajee 20 account.

5 Data Security and Retention

hbajee 20 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of all sensitive personal data and financial records at rest;
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data;
• Regular independent security audits and penetration testing of the Platform infrastructure;
• Multi-factor authentication requirements for all administrative access to systems holding personal data;
• Automatic session timeouts and account lockout policies to mitigate the risk of unauthorised account access.

5.1 Data Retention

hbajee 20 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

When personal data reaches the end of its retention period, it is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised data (data from which all identifying information has been permanently removed) may be retained indefinitely for statistical and platform improvement purposes.

6 Your Privacy Rights

As a user of the hbajee 20 platform, you have a number of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our compliance team using the contact details provided at the end of this policy.

• Right of Access: You have the right to request a copy of the personal data that hbajee 20 holds about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days of receiving a valid request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Minor account details (such as your contact phone number or email address) can be updated directly through your account settings panel.
• Right to Erasure: You have the right to request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw your consent (where consent was the basis for processing). Please note that we may be unable to fulfil an erasure request in full where we are required to retain certain data by law (for example, transaction records for AML compliance purposes).
• Right to Restrict Processing: You have the right to request that we pause the processing of your personal data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. In such cases, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where we process your data on the basis of your consent (for example, for promotional communications), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal.

All privacy rights requests should be submitted in writing to our support team at the email address listed in the Information column of our website footer. We will acknowledge your request within 5 business days and aim to resolve it within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and you will be notified accordingly.

7 Third-Party Services and Links

The hbajee 20 platform may contain references to third-party services, including payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). When you interact with a third-party service — for example, when you initiate a bKash deposit — you will be subject to that provider's own privacy policy and terms of service. hbajee 20 is not responsible for the data practices of any third-party service provider and encourages you to review the relevant privacy policies before sharing your personal data with any external service.

The hbajee 20 platform does not contain links to external websites unrelated to the operation of the Platform. All navigation links on the Platform point to internal hbajee 20 pages. Any external interaction (for example, a payment gateway interface) is operated by the respective third-party provider and is governed by their privacy practices.

8 Updates to This Privacy Policy

hbajee 20 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, the revised policy will be published on the Platform with an updated effective date at the top of this page. Where changes are significant, we may also notify you directly via the email address associated with your hbajee 20 account.

Your continued use of the hbajee 20 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. It is your responsibility to review this policy periodically. If you disagree with any changes to this policy, you must discontinue use of the Platform and contact our support team to arrange the closure of your account.

This Privacy Policy was last reviewed and updated on 1 January 2026. If you have questions or concerns about any aspect of this policy, please contact our data compliance team. Support email (plain text — not a clickable link): [email protected]