Legal

hbaj Privacy Policy

Your privacy matters to us. This policy explains exactly what personal information hbaj collects, why we collect it, and how we keep it safe.

Last updated: January 2026

Our Commitment to Your Privacy

At hbaj, we take the privacy of our players seriously. This Privacy Policy describes how hbaj collects, uses, stores, discloses and protects the personal information of users who access or use the hbaj platform at hbaj.bar. By registering an account or using our services, you consent to the collection and use of your personal information as described in this policy. This policy should be read alongside our Terms and Conditions, which govern your overall use of the platform.

hbaj uses SSL encryption to protect all data in transit. We never sell your personal information to third parties for marketing purposes. Your data is processed solely to provide, improve and secure the hbaj platform.

Privacy at a Glance

SSL Protected
All data transmitted between your device and hbaj is encrypted using industry-standard SSL technology.
Secure Storage
Personal data is stored on secured servers with access restricted to authorised personnel only.
No Data Selling
We never sell or rent your personal information to third-party advertisers or data brokers.
Transparent Use
We tell you exactly why we collect each type of data and how long we retain it before secure deletion.
Your Right to Correct
You may request correction of any inaccurate personal data held by hbaj at any time via customer support.
Your Right to Delete
You may request deletion of your personal data subject to our legal obligations, including anti-money laundering retention requirements.

Information We Collect

hbaj collects personal information in several ways: directly from you when you register or use our services, automatically when you interact with the platform, and in some cases from third-party service providers. The categories of personal information we collect are described below.

Identity and Contact Information
When you register an account with hbaj, we collect your full legal name, date of birth, Bangladeshi mobile phone number, email address (if provided) and any identity documents submitted during KYC verification, such as your national identification card or passport. This information is required to verify your identity, confirm your age and comply with applicable legal obligations.
Financial and Transaction Information
hbaj records all deposits, withdrawals and wagering transactions associated with your account. This includes the payment method used (for example bKash, Nagad or Rocket wallet numbers), transaction amounts, timestamps and transaction reference numbers. We do not store full card numbers or wallet PINs. Financial transaction records are retained for the periods required by applicable law, which may be up to seven years.
Technical and Usage Data
When you access hbaj, we automatically collect certain technical information including your IP address, device type, operating system, browser type, screen resolution, session duration, pages visited, game sessions played and referring URLs. This data is collected through standard web server logs and, where applicable, cookies. We use this information to maintain platform security, prevent fraud, diagnose technical issues and understand how players interact with our services.

How We Use Your Information

hbaj uses the personal information we collect for the following purposes. We will not use your information for any purpose that is incompatible with those listed below without first obtaining your explicit consent:

  • Account management: to create and maintain your player account, verify your identity, process deposits and withdrawals, and communicate with you about your account status.
  • Service delivery: to provide access to games, sports betting markets, promotions and all other platform features in accordance with your account preferences and jurisdiction.
  • Legal compliance: to fulfil our obligations under applicable law, including anti-money laundering (AML) checks, Know Your Customer (KYC) verification and responsible gaming requirements such as age verification and self-exclusion enforcement.
  • Fraud prevention and security: to monitor for and prevent fraudulent activity, unauthorised account access, bonus abuse, match-fixing, money laundering and other prohibited conduct as defined in our Terms and Conditions.
  • Platform improvement: to analyse usage patterns, diagnose technical issues, develop new features and improve the overall quality and performance of the hbaj platform for all players.
  • Customer support: to respond to your enquiries, process complaints and provide assistance with technical issues, account queries, payment disputes and any other support requests you submit.

hbaj processes your personal information under one or more of the following legal bases, depending on the specific purpose of the processing activity:

Contractual Necessity
Processing your identity, financial and account data is necessary for hbaj to provide you with the services set out in our Terms and Conditions. Without this processing, we would be unable to create your account, process your transactions or deliver game access.
Legal Obligation
Certain processing activities — including KYC verification, age checks and transaction record-keeping — are required by applicable law. hbaj is obligated to perform these activities regardless of your preferences and cannot provide services to players who refuse to undergo required verification.
Legitimate Interests
hbaj may process certain data — such as usage logs, device fingerprints and behavioural patterns — under the basis of legitimate interests, specifically to detect and prevent fraud, maintain platform security, resolve disputes and improve service quality. Where we rely on legitimate interests, we have assessed that these interests are not overridden by your rights and freedoms.

Sharing Your Information

hbaj does not sell your personal information. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

  • Payment processors: We share transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa and Mastercard solely to process deposits and withdrawals from your account. These providers operate under their own privacy policies and data protection obligations.
  • Game providers: Certain game providers (for example Pragmatic Play and Evolution Gaming) may receive session data required to deliver their games and detect technical malfunctions. These providers are contractually prohibited from using your data for any purpose beyond game delivery.
  • Identity and fraud verification services: hbaj may share identity documents and related information with specialist KYC and anti-fraud service providers to verify your identity and detect potential fraud. These providers act as data processors under our instruction and are not permitted to use your data independently.
  • Law enforcement and regulators: hbaj may disclose personal information to law enforcement agencies, government authorities or regulators where required to do so by applicable law, court order or regulatory direction. We will notify you of such disclosure where permitted by law.

In all cases where we share your personal information with third parties, we require those parties to maintain appropriate security standards and to use your information only for the specific purpose for which it was shared. hbaj remains responsible for ensuring that any such sharing is conducted lawfully and securely.

Cookies and Tracking Technologies

hbaj uses cookies and similar tracking technologies to enable essential platform functionality, maintain your login session, remember your preferences and gather anonymised usage statistics. The following types of cookies are used on the hbaj platform:

Essential Cookies
These cookies are strictly necessary for the hbaj platform to function. They enable core features such as user authentication, session management and security token validation. These cookies cannot be disabled without breaking platform functionality. They do not collect any information that could be used to identify you outside of the hbaj platform.
Analytics Cookies
hbaj may use anonymised analytics cookies to understand how players navigate the platform, which games are most popular and where technical issues occur. The data collected through analytics cookies does not identify you personally and is used solely to improve the platform. You may opt out of analytics tracking by adjusting your browser settings; however, essential cookies will continue to operate.

Data Retention

hbaj retains personal information only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. As a general principle, account data is retained for the duration of the account's active life and for a period of five years following account closure. Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of seven years in compliance with anti-money laundering regulations. Usage logs and technical data are typically retained for a shorter period of up to twelve months unless required for the investigation of a specific security incident or dispute. Where data is no longer required, hbaj will delete or anonymise it using industry-standard secure deletion methods.

Data Security

hbaj implements a range of technical and organisational security measures to protect your personal information against unauthorised access, loss, destruction or alteration. These measures include SSL/TLS encryption for all data in transit between your device and our servers, encrypted storage for sensitive personal data at rest, access controls restricting data access to authorised employees on a need-to-know basis, regular security assessments and penetration testing of our systems, and incident response procedures to detect, contain and report data breaches promptly. Despite these measures, no internet-based platform can guarantee absolute security. If you become aware of any suspected security incident relating to your hbaj account, please notify our support team immediately using the contact details in the footer of this page.

Never share your hbaj password or any two-factor authentication codes with anyone, including hbaj support staff. Our support team will never ask for your password by email, phone or chat. If you receive such a request, treat it as a phishing attempt and report it to us immediately.

Your Privacy Rights

As a user of hbaj, you have the following rights in relation to the personal information we hold about you. To exercise any of these rights, please contact our support team using the email address displayed in the footer of this page:

  • Right of access: You may request a copy of the personal information hbaj holds about you at any time. We will respond to verified access requests within 30 days.
  • Right to rectification: If any personal information we hold about you is inaccurate or incomplete, you may request that we correct or update it. We will action valid correction requests promptly.
  • Right to erasure: You may request deletion of your personal data. We will fulfil erasure requests subject to any legal obligations that require us to retain specific data, such as transaction records required under anti-money laundering law.
  • Right to object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
  • Right to data portability: Where processing is based on your consent or a contract with you, you may request that we provide your personal data in a structured, commonly used and machine-readable format so that you can transfer it to another service provider.

hbaj aims to resolve all privacy-related requests within 30 days of receipt. If you are not satisfied with our response to a privacy request or complaint, you may escalate the matter by contacting our support team again and requesting senior review. Contact details are available in the footer of this page.

Children's Privacy

hbaj is strictly an adults-only platform. We do not knowingly collect or process personal information from individuals under the age of 21. If we become aware that personal information has been collected from a person under 21 years of age, we will immediately delete that information and close the associated account. If you believe that a minor may have registered on hbaj using false age information, please contact our support team immediately using the email address in the footer of this page so that we can investigate and take appropriate action.

Changes to This Privacy Policy

hbaj reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this policy, we will notify registered players by posting a prominent notice on the platform and, where practicable, by sending a notification to your registered contact details. The date at the top of this page will be updated to reflect the date of the most recent revision. Your continued use of the hbaj platform after the revised policy takes effect constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically so that you remain informed about how we protect your information.


If you have any questions about this Privacy Policy or about how hbaj handles your personal information, please contact our support team using the email address displayed in the footer of this page. Please do not send sensitive personal data such as passwords, payment details or identity document scans by email — our team will advise you on the secure channel to use for submitting such information if required.

Ready to Play Securely?

Your data is protected by SSL encryption. Explore hbaj Casino's full game library or visit our FAQ for answers about account security and responsible gaming.