Privacy Policy
At hbaji24, your privacy is a fundamental priority. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is used and safeguarded, and what rights you hold as a player on our platform. We encourage every user to read this document in full before registering an account.
Our Privacy Commitments
Before diving into the full policy text, here is a plain-language summary of the six core commitments hbaji24 makes to every player regarding their personal data.
End-to-End Encryption
All data transmitted between your device and hbaji24 servers is protected by 256-bit SSL/TLS encryption. Your account credentials, payment details, and personal information are never sent in plain text over any network.
No Unauthorised Sale of Data
hbaji24 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your information is shared only with operational partners strictly necessary to run the platform.
You Control Your Data
Registered players have the right to access, correct, export, and request deletion of their personal data at any time by contacting our support team. We respond to verified data requests within 30 days.
Transparent Cookie Use
hbaji24 uses only essential, functional, and analytics cookies. We do not use invasive tracking cookies or share cookie-derived data with advertising networks. Our full cookie policy is detailed in the Cookies section below.
Clear Retention Periods
We retain your data only for as long as necessary to provide our services and meet legal obligations. The specific retention period for each data category is outlined in the Data Retention section of this policy.
Opt-Out of Marketing
Promotional communications from hbaji24 — including SMS, email, and in-platform notifications — are strictly opt-in. You may withdraw your marketing consent at any time via Account Settings or by contacting our support team.
1. Data We Collect
hbaji24 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your device and browser when you access the site, and from trusted third-party partners involved in payment processing and identity verification. The following sections describe each category of data we collect.
1.1 Registration Data
When you create a hbaji24 account, we collect the following information:
- Full legal name (as it appears on your government-issued identification).
- Date of birth (used to verify that you meet the 18-years minimum age requirement).
- Email address (used for account communications and, if you opt in, promotional messages).
- Mobile phone number (used for account security, two-factor authentication, and support).
- Residential address (used for identity verification and fraud prevention).
- Preferred payment method and associated account details (e.g., your bKash or Nagad mobile number, or bank account name).
1.2 Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) process, we may collect copies of identity documents including your National Identity Card (NID), passport, or other government-issued photo identification. We may also collect a photograph or selfie for facial verification purposes. KYC document images are stored securely and processed solely for identity and age verification and anti-money-laundering compliance.
1.3 Financial Transaction Data
hbaji24 records all deposit and withdrawal transactions associated with your account, including the transaction amount in Bangladeshi Taka (৳), the payment method used, the date and time of the transaction, and the transaction reference number provided by the payment provider. Full payment card or bank account numbers are never stored on hbaji24 servers; this information is handled exclusively by our payment processing partners.
1.4 Gaming Activity Data
We collect a complete record of your wagering activity on the platform, including games played, bet amounts and outcomes, session start and end times, bonus offers claimed and wagering progress, and responsible gaming tool settings you have configured. This data is used for account management, dispute resolution, bonus administration, and improving our game offerings.
1.5 Technical and Device Data
When you access hbaji24, our servers and analytics systems automatically collect certain technical information, including:
- IP address and approximate geographic location (city/district level).
- Browser type and version, operating system, and device type.
- Pages visited, time spent on each page, and click-stream data.
- Session identifiers and cookie data (see the Cookies section for full details).
- Referring URL (the page you visited immediately before arriving at hbaji24).
This technical data is used for platform security, fraud detection, performance optimisation, and aggregate analytics. It is not used to identify you individually unless combined with account data during a security investigation.
1.6 Customer Support Communications
When you contact our support team via live chat, email, or any other channel, we retain a record of the communication, including your account details, the nature of the query, and any resolution reached. These records are kept to maintain service quality, resolve disputes, and comply with applicable record-keeping obligations.
Data Minimisation Principle
We apply the principle of data minimisation across all collection activities. If a piece of data is not operationally necessary, we do not collect it. You will never be asked for information that is irrelevant to your account or our legal obligations.
2. How We Use Your Data
hbaji24 processes your personal data on one or more of the following lawful bases: (a) performance of a contract — to deliver the services you have signed up for; (b) legal obligation — to comply with applicable anti-money-laundering, identity-verification, and record-keeping requirements; (c) legitimate interests — to protect the platform from fraud and to improve our services; and (d) consent — for optional processing activities such as marketing communications, where you have explicitly opted in.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account creation & management | Registration data, contact details | Contract performance |
| Age & identity verification | Date of birth, KYC documents | Legal obligation |
| Processing deposits & withdrawals | Financial transaction data, payment method details | Contract performance |
| Fraud & security monitoring | Technical data, transaction data, gaming activity | Legitimate interests |
| Anti-money-laundering compliance | KYC data, transaction data | Legal obligation |
| Responsible gaming monitoring | Gaming activity, session data, account settings | Legal obligation / Legitimate interests |
| Customer support | Support communications, account data | Contract performance |
| Platform analytics & improvement | Technical data, aggregated gaming data | Legitimate interests |
| Marketing communications | Email address, mobile number, gaming preferences | Consent (opt-in only) |
| Dispute resolution | Gaming records, communications, transaction logs | Legal obligation / Contract performance |
2.1 Marketing Communications
hbaji24 will only send you promotional messages — including bonus offers, tournament announcements, and seasonal promotions — if you have explicitly opted in to receive them during registration or through your Account Settings. Marketing messages are sent via email and/or SMS. You may withdraw your consent at any time by updating your communication preferences in Account Settings or by replying STOP to any SMS message. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal.
2.2 Automated Decision-Making
hbaji24 uses automated systems to detect fraudulent activity, identify problem-gambling patterns, and flag accounts for KYC review. Where an automated process results in a significant decision affecting your account — such as a temporary suspension — you have the right to request that a human member of our team review that decision. To do so, contact our support team at [email protected].
3. Data Sharing & Third Parties
hbaji24 does not sell or rent your personal data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
3.1 Payment Processing Partners
To facilitate deposits and withdrawals in Bangladeshi Taka, hbaji24 shares transaction-relevant data — such as your registered mobile number or bank account name — with our payment processing partners, which include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank. These partners process your payment data under their own privacy policies and security standards. hbaji24 does not store full payment credentials on our own servers.
3.2 Identity Verification Providers
Where KYC verification is required, your identity documents and, where applicable, biometric data may be shared with a trusted third-party identity verification service. Such providers process your data solely for the purpose of verifying your identity on behalf of hbaji24 and are contractually prohibited from using your data for any other purpose.
3.3 Game Software Providers
Our casino and sports-betting products are powered by third-party game studios and platform providers, including but not limited to Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your account identifier and certain session data necessary to render games and record outcomes. They do not receive your full personal profile or payment details. All providers are bound by strict data processing agreements with hbaji24.
3.4 Legal and Regulatory Authorities
hbaji24 may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or courts in response to a lawful request, court order, or legal obligation. In such cases, we will disclose only the minimum data required to satisfy the legal request and will notify you of the disclosure where we are legally permitted to do so.
3.5 Business Transfers
In the event that hbaji24 undergoes a merger, acquisition, restructuring, or sale of all or part of its business, your personal data may be transferred to the successor entity as part of that transaction. We will notify registered players via their registered email address prior to any such transfer and will ensure that the successor entity is bound by privacy obligations no less protective than those set out in this policy.
3.6 No Cross-Border Transfers Without Safeguards
hbaji24 operates its primary data infrastructure within the region. Where any data is processed by a third-party provider whose infrastructure is located outside Bangladesh, we ensure that appropriate contractual safeguards are in place prior to any such transfer, consistent with applicable data protection standards.
Third-Party Accountability
Every third party that receives your data from hbaji24 is bound by a formal data processing agreement that restricts how they may use that data and requires them to maintain appropriate security standards.
5. Data Security
hbaji24 implements a layered security architecture designed to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our approach to data security encompasses technical controls, organisational procedures, and ongoing monitoring.
5.1 Technical Safeguards
- TLS/SSL Encryption: All data in transit between your device and hbaji24 servers is encrypted using TLS 1.2 or higher with 256-bit encryption. Our SSL certificate is maintained and renewed continuously.
- Data at Rest Encryption: Sensitive data stored in our databases — including identity documents and payment records — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to production databases containing personal data is restricted to a minimal set of authorised personnel on a need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA).
- Firewall and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection systems that monitor for unusual access patterns and alert our security team in real time.
- Penetration Testing: hbaji24 commissions periodic third-party penetration tests to identify and remediate vulnerabilities in our platform before they can be exploited.
5.2 Organisational Safeguards
Our staff who handle personal data receive regular privacy and security training. Access to personal data is granted strictly on a need-to-know basis and is logged for audit purposes. We conduct regular internal reviews of our data handling practices to ensure ongoing compliance with this policy.
5.3 Data Breach Response
In the unlikely event of a personal data breach that poses a risk to your rights or freedoms, hbaji24 will notify affected players promptly via their registered email address, describing the nature of the breach, what data was affected, and the steps we are taking to remediate the situation and prevent recurrence.
Your Role in Security
While we secure our systems rigorously, account security also depends on you. Use a strong, unique password for your hbaji24 account, enable two-factor authentication if available, and never share your login credentials with anyone — including hbaji24 staff, who will never ask for your password.
Responsible Disclosure
If you discover a security vulnerability on the hbaji24 platform, please report it immediately to [email protected]. We take all security reports seriously and will acknowledge and investigate every submission.
6. Data Retention
hbaji24 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following table sets out the standard retention periods for each category of data we hold.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years | Legal obligation (AML, record-keeping requirements) |
| KYC identity documents | Duration of account + 5 years | Legal obligation (identity verification regulations) |
| Financial transaction records | 7 years from transaction date | Legal obligation (financial record-keeping) |
| Gaming activity records | Duration of account + 3 years | Dispute resolution, responsible gaming monitoring |
| Customer support records | 3 years from last interaction | Service quality, dispute resolution |
| Technical / device data | 13 months from collection | Security monitoring, platform analytics |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent for compliance purposes |
| Closed / banned account data | 5 years from closure date | Fraud prevention, regulatory compliance |
6.1 Deletion and Anonymisation
At the end of the applicable retention period, your personal data will be either securely deleted from our systems or anonymised in such a way that it can no longer be associated with you. Anonymised data — for example, aggregated statistical data about platform usage — may be retained indefinitely for analytical purposes, as it no longer constitutes personal data.
6.2 Retention Overrides
In certain circumstances, we may be required to retain data beyond the standard periods set out above — for example, where a legal dispute is ongoing, where a regulatory authority has issued a data preservation notice, or where fraud is under active investigation. In such cases, data will be retained only for the additional period strictly necessary and will be deleted promptly once the reason for extended retention no longer applies.
7. Your Privacy Rights
As a player on hbaji24, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with your account details and a description of your request. We will respond to all verified requests within 30 calendar days.
Right of Access
You have the right to request a copy of all personal data hbaji24 holds about you, along with information about how it is being used. We will provide this in a clear, structured format.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For minor corrections, you may be able to update information directly via Account Settings.
Right to Erasure
You may request that hbaji24 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other lawful basis applies. Note that certain data must be retained to fulfil legal obligations and cannot be deleted on request.
Right to Restriction of Processing
You have the right to ask hbaji24 to restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
Right to Data Portability
Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
Right to Object
You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time.
Right to Withdraw Consent
Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
Right to Human Review of Automated Decisions
Where a significant decision affecting your account has been made solely by automated means, you have the right to request that a human member of our team reviews that decision and provides an explanation of the outcome.
Response Timeframe
hbaji24 will acknowledge your data rights request within 5 business days and provide a full response within 30 calendar days of receipt. In cases of complexity or high volume, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Identity Verification Required
To protect your data from unauthorised access, hbaji24 will verify your identity before processing any data rights request. We may ask you to confirm details associated with your account or provide a copy of an identity document before fulfilling the request.
8. Policy Updates & Contact
8.1 Changes to This Privacy Policy
hbaji24 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to this policy, we will notify registered players via their registered email address at least 14 days before the changes take effect. The updated policy will also be published on this page with a revised "Last Updated" date at the top.
Your continued use of the hbaji24 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you should cease using the platform and may request account closure by contacting our support team.
8.2 Minor and Non-Material Updates
We may make minor clarifications, typographical corrections, or non-material formatting updates to this policy without providing advance notice. Such changes do not alter your rights or hbaji24's obligations and will be reflected in the "Last Updated" date on this page.
8.3 Contacting hbaji24 About Privacy
If you have questions, concerns, or complaints about this Privacy Policy or how hbaji24 handles your personal data, please contact us using the details below. We take privacy enquiries seriously and will respond to all submissions promptly and thoroughly.
Email: [email protected]
Response time: Within 5 business days
Live Chat: Available 24/7 via the hbaji24 platform
8.4 Children and Minors
hbaji24 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has registered an account or provided personal data to hbaji24, please contact our support team immediately so we can investigate and take appropriate action, including account closure and secure deletion of any data collected.
8.5 Governing Language
This Privacy Policy is written and published in English. In the event of any conflict or ambiguity between this English-language version and any translated version, the English version shall prevail.
Stay Informed of Changes
We recommend bookmarking this page and checking it periodically. Material changes are also announced via your registered email address, so keep your contact details up to date in Account Settings.
Questions? We Are Here
Our support team is available around the clock to answer any questions you have about this Privacy Policy or how your data is handled. Reach us via live chat on the platform or email us at [email protected].
Explore hbaji24 With Confidence
Now that you understand how hbaji24 protects your personal data, you can enjoy our full range of games and sports betting markets with complete peace of mind. From BPL cricket and live casino tables to slots, Bingo, and Super Keno — all secured and served in Bangladeshi Taka.