haybjj Privacy Policy

1 Data Collection

haybjj collects personal information through several channels: directly from you when you register or update your account, automatically as you use the Platform, and in limited circumstances from trusted third-party verification providers. We do not collect more data than is reasonably necessary to deliver our services and meet our legal obligations.

Information You Provide Directly

When you create or maintain a haybjj account, we may collect the following categories of personal data:

• Identity data: full legal name, date of birth, national identity card (NID) number, passport number, or other government-issued identification details provided during Know Your Customer (KYC) verification.
• Contact data: email address, mobile phone number, and city or district of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Financial data: bKash account number, Nagad account number, Rocket account number, bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, etc.), Visa or Mastercard details used for transactions on the Platform.
• Communications data: messages and attachments you send to our customer support team, feedback you submit, and any information you volunteer during a responsible gaming consultation.
• Account preference data: your chosen username, notification preferences, language settings, and self-imposed responsible gaming limits.

Information Collected Automatically

When you access the Platform, our systems automatically collect certain technical and behavioural data, including:

• IP address, device type, operating system, and browser version.
• Session timestamps, pages visited, games played, bets placed, and in-session navigation patterns.
• Geolocation data at country and city level, derived from your IP address, to support compliance and responsible gaming obligations.
• Cookie identifiers and similar tracking technology data (see Section 3 for full details).
• Referral source data indicating how you arrived at the haybjj Platform (e.g., direct URL entry, search engine, affiliate partner link).

Information from Third Parties

In limited circumstances, haybjj may receive personal data about you from trusted third-party service providers, including identity verification agencies, fraud prevention databases, and payment processors. We use such data solely to verify your identity, assess risk, and ensure the integrity of financial transactions on the Platform.

2 How We Use Your Data

haybjj processes your personal data only where we have a lawful basis for doing so. The primary lawful bases we rely upon are: contractual necessity (processing is required to deliver the services you have signed up for), legal obligation (processing is required to comply with applicable law), and legitimate interests (processing is proportionate, necessary, and does not override your fundamental privacy rights).

Marketing Communications

haybjj may send you promotional emails or SMS notifications about new games, bonuses, seasonal promotions (including Eid, Pohela Boishakh, and cricket season specials), and platform updates — but only if you have opted in to receive such communications. You may withdraw your consent and unsubscribe from marketing at any time by adjusting your notification preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

3 Cookies & Tracking

Like most online platforms, haybjj uses cookies — small text files stored on your device — and similar tracking technologies (pixel tags, session storage, local storage) to make the Platform function correctly, keep your session secure, and understand how players use our services so we can improve them over time.

Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. You cannot opt out of these without ceasing to use the Platform.
• Functional cookies: Remember your preferences such as language setting, responsible gaming limits, and your most recently played games, so you do not have to re-enter them each visit.
• Analytics cookies: Help us understand aggregate usage patterns — which games are most popular, which pages generate the most support queries, and where players drop off in registration flows. Data is aggregated and anonymised wherever possible.
• Fraud prevention cookies: Assist in identifying suspicious device fingerprints, multiple-account creation attempts, and bot activity. These are strictly necessary for Platform security.

Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, and receive alerts before new cookies are stored. Please note that disabling certain cookies may affect Platform functionality — for example, your game preferences may not be saved between sessions. haybjj does not currently use third-party advertising networks that place tracking cookies for cross-site behavioural advertising.

4 Data Sharing

haybjj does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the specific circumstances described below, and always subject to appropriate contractual safeguards.

Service Providers and Data Processors

haybjj engages trusted third-party service providers who process personal data on our behalf to help us deliver the Platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard network processors. These parties receive the minimum financial data necessary to complete your transaction and operate under their own stringent regulatory frameworks.
• Identity verification providers: Third-party KYC agencies that assist haybjj in verifying the identity and age of players. These providers receive only the data required to perform verification and are contractually prohibited from using it for any other purpose.
• Fraud prevention services: Risk intelligence providers that help haybjj detect and prevent money laundering, bonus abuse, and unauthorised account access.
• Hosting and infrastructure providers: Cloud hosting and CDN providers that store and serve Platform data. All hosting arrangements use encrypted storage and comply with industry security standards.
• Game software providers: Licensed game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) whose game engines are embedded within the Platform. These providers may receive pseudonymised session data necessary to deliver gameplay and calculate outcomes. They do not receive your full identity or financial details.

Legal Disclosure

haybjj may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a court order, or where we believe disclosure is necessary to prevent fraud, money laundering, or harm to persons. In such cases, haybjj will disclose only the minimum data required to comply with the legal obligation.

Business Transfers

In the event that haybjj undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by haybjj may form part of the transferred assets. You will be notified of any such transfer and any resulting material change to this Privacy Policy via email to your registered address before it takes effect.

5 Data Retention

haybjj retains personal data for as long as is necessary to fulfil the purpose for which it was collected, taking into account applicable legal, regulatory, and operational requirements. The following general retention periods apply:

When a retention period expires, haybjj will securely delete or irreversibly anonymise the relevant personal data. Anonymised data (from which no individual can reasonably be identified) may be retained indefinitely for statistical and analytical purposes.

6 Your Privacy Rights

haybjj respects your rights over your personal data. Subject to applicable legal limitations and our own regulatory obligations, you hold the following rights with respect to the personal information we hold about you. To exercise any of these rights, contact our privacy team at [email protected] with the subject line "Privacy Rights Request".

• Right of access: You may request a copy of all personal data haybjj holds about you. We will respond to verified access requests within a reasonable period and at no charge for the first request per calendar year.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as updating your phone number) can also be made directly in your account settings.
• Right to erasure: You may request that haybjj delete your personal data where it is no longer necessary for the purpose for which it was collected, you have withdrawn consent, or there is no overriding legal basis for retention. Note that erasure requests cannot be fulfilled where retention is required by law.
• Right to restrict processing: You may ask haybjj to restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is under dispute.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object to marketing: You may withdraw consent for direct marketing communications at any time without consequence to your account standing. Use the unsubscribe link in any marketing email or contact [email protected].
• Right not to be subject to solely automated decisions: Where an automated decision significantly affects your account (see Section 2), you have the right to request human review.

7 Data Security

haybjj employs a layered security framework to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security programme includes the following measures:

• Encryption in transit: All data exchanged between your device and the haybjj Platform is encrypted using TLS 1.2 or higher with 256-bit key strength, protecting your personal and financial information from interception over any network — including public Wi-Fi hotspots in Dhaka, Sylhet, or Cox's Bazar.
• Encryption at rest: Sensitive personal data stored in haybjj's databases — including identity documents and financial details — is encrypted at the storage layer using AES-256 encryption.
• Access controls: Internal access to personal data is strictly limited on a need-to-know basis. haybjj staff members are granted only the minimum data access required to perform their specific job functions. All access is logged and regularly audited.
• Two-factor authentication (2FA): haybjj offers 2FA via SMS for player accounts and requires multi-factor authentication for all staff accessing production systems containing personal data.
• Penetration testing and vulnerability management: The Platform and its underlying infrastructure are subject to regular independent security assessments. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
• Incident response: haybjj maintains a documented data breach response plan. In the event of a security incident that poses a risk to your personal data, we will notify affected players promptly and take all reasonable steps to contain the incident and prevent recurrence.

While haybjj takes comprehensive measures to protect your data, no internet-based platform can guarantee absolute security. You also play a role in keeping your data safe: use a strong, unique password for your haybjj account, enable 2FA, and never share your login credentials with anyone. If you suspect your account has been compromised, contact [email protected] immediately.

8 Privacy Contact

haybjj is committed to handling your privacy concerns seriously and transparently. If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how we have handled your personal data, please contact our privacy team using the details below.

All privacy enquiries should be directed to:

Changes to This Privacy Policy

haybjj reviews this Privacy Policy periodically to ensure it remains accurate, complete, and current. When we make material changes — for example, introducing a new data processing purpose or engaging a new category of third-party processor — we will notify registered players via email to their registered address at least 14 days before the changes take effect. Minor clarifications and non-material updates may be published without advance notice, though the "Last Updated" date will always reflect the most recent revision. Continued use of the Platform following any update to this Policy constitutes your acceptance of the revised terms.

This Privacy Policy was last updated in January 2026 and supersedes all prior versions. In the event of any conflict between this Policy and any previous privacy notice published by haybjj, this Policy prevails.