h bazi Privacy Policy

h bazi collects personal data through several channels: directly from you when you register an account or submit a support request; automatically through your use of the platform; and from third-party identity verification and payment service providers. The following table summarises the categories of personal data we collect and the primary reason for collection.

1.1 Data You Provide Directly

When you create an account on h bazi, you provide us with your name, date of birth, mobile number, and email address. During KYC verification, you additionally submit government-issued identity documents and, where required, proof of address and proof of payment method. If you contact our support team, the content of that communication — including any personal details you share in describing your issue — is retained as part of your case record.

1.2 Data Collected Automatically

When you access h bazi through a web browser or mobile device, we automatically collect certain technical data. This includes your IP address (which may indicate your approximate geographic location within Bangladesh), the type and version of browser you are using, your device's operating system, unique device identifiers, and the timestamps of your login and logout events. This data is collected for security and platform performance purposes and is not used for behavioural advertising.

1.3 Data from Third Parties

h bazi may receive limited personal data from third-party sources in the following circumstances:

• Identity verification providers: Results and flags from automated document-verification services used during KYC.
• Payment processors: Transaction confirmation references and status updates from bKash, Nagad, Rocket, Upay, and card payment gateways.
• Fraud prevention databases: Industry-shared watchlists used to identify known fraudulent actors or self-excluded players attempting to re-register.

h bazi processes your personal data only for purposes that are lawful and proportionate. We rely on the following legal bases for processing, depending on the activity in question: performance of the contract between us (operating your account); compliance with legal obligations (KYC, AML, responsible gaming); our legitimate interests (security monitoring, fraud prevention, platform improvement); and, where required, your explicit consent (marketing communications).

2.1 Account Operation and Service Delivery

The primary purpose for which we use your personal data is to deliver the h bazi gaming service to you. This includes creating and maintaining your account, processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, recording your bet history for settlement and dispute purposes, and providing customer support when you contact us.

2.2 Identity Verification and Legal Compliance

Bangladeshi players must be 18 years of age or older to use h bazi. We use the identity data you provide to verify your age before your account becomes fully active. In addition, h bazi applies anti-money laundering (AML) procedures that require us to monitor transaction patterns and, in some circumstances, request source-of-funds documentation. These activities are legal obligations and cannot be opted out of — if you decline to provide the required data, we are unable to offer you a fully functional account.

2.3 Responsible Gaming Monitoring

h bazi uses your usage data — including session length, bet frequency, deposit volume, and win/loss patterns — to identify players who may be at risk of developing gambling-related problems. Where our responsible gaming algorithms flag a player's behaviour as potentially harmful, our team may make proactive contact to offer support tools such as deposit limits, session timers, or self-exclusion. This processing is carried out under our legitimate interest in promoting safe gambling practices.

2.4 Marketing and Promotions

With your consent, h bazi may send you promotional communications about bonuses, seasonal offers (such as BPL cricket season promotions, Eid specials, or Pohela Boishakh bonuses), new game launches, and other relevant updates. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

2.5 Platform Security and Fraud Prevention

Technical data such as IP addresses, device identifiers, and login timestamps are used by h bazi's security systems to detect and prevent fraudulent activity, including multi-accounting, unauthorised account access, and use of automated betting software. Where suspicious activity is detected, we may temporarily suspend the affected account pending investigation.

h bazi does not sell your personal data. We share personal data with third parties only where necessary to operate the platform, comply with legal obligations, or protect against fraud. All third-party service providers who receive personal data from h bazi are contractually required to process that data only for the specified purpose and to maintain appropriate security standards.

3.1 Service Providers

We share personal data with the following categories of service providers:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateway providers receive the minimum transaction data required to process your deposits and withdrawals.
• Identity verification services: KYC document-processing providers receive copies of your identity documents solely for the purpose of verifying their authenticity.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe, and others receive a pseudonymised player identifier to facilitate game session initiation and bet settlement. They do not receive your name, contact details, or financial data.
• Cloud infrastructure: h bazi's platform is hosted on secure cloud infrastructure. The hosting provider processes data only as instructed by h bazi under a data processing agreement.
• Customer support tools: Our support ticketing system processes the content of your support communications to facilitate case management.

3.2 Legal Disclosures

h bazi may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where we are legally required to do so, or where we reasonably believe that disclosure is necessary to prevent or detect crime, protect the safety of our players or staff, or defend h bazi against legal claims. In all cases, we disclose only the minimum data necessary for the stated purpose.

3.3 Industry Fraud Prevention

h bazi participates in industry-level responsible gaming and fraud prevention initiatives. Where a player's account is closed for serious violations — such as identity fraud, underage gambling, or confirmed money laundering — limited account reference data may be shared with relevant industry databases to prevent re-registration under a different identity.

3.4 Business Transfers

In the event that h bazi undergoes a business restructuring, merger, acquisition, or asset sale, personal data held about registered players may be transferred to the successor entity as part of the transaction. In such circumstances, h bazi will notify affected players via the registered email address on their account and the successor entity will be required to honour the commitments made in this Privacy Policy.

h bazi uses cookies and similar technologies — including local storage and session identifiers — to operate the platform, maintain your login session, remember your preferences, and analyse how the platform is used. The following table describes the categories of cookies we use and their purpose.

4.1 Managing Your Cookie Preferences

You can control non-essential cookies through the cookie preference centre accessible from your account settings page. Additionally, most modern browsers allow you to block or delete cookies at the browser level via their privacy or settings menus. Please be aware that disabling strictly necessary or security cookies will impair or entirely prevent your ability to use the h bazi platform, including logging in and placing bets.

4.2 No Cross-Site Tracking

h bazi does not use third-party advertising cookies or cross-site tracking pixels. Our analytics cookies collect data only about activity on the h-bazi.club domain and do not follow you to other websites. We do not participate in cookie-based retargeting advertising networks.

h bazi retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The retention periods described below represent the standard periods applied by h bazi in the absence of a specific legal requirement to retain data for longer.

5.1 Active Account Data

While your account remains active, h bazi retains all personal data associated with your account, including identity documents, transaction history, bet records, and communications. This data is necessary for the ongoing operation of your account, the settlement of any open disputes, and compliance with our responsible gaming and AML obligations.

5.2 Post-Closure Retention

Following the closure of a player account — whether voluntarily or by h bazi — we retain the following categories of data for the periods specified:

• Identity and KYC documents: Retained for a minimum of 5 years post-closure to satisfy AML record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years post-closure for financial audit and AML compliance purposes.
• Bet history and game records: Retained for 3 years post-closure for dispute resolution purposes.
• Support correspondence: Retained for 3 years post-closure to facilitate the resolution of delayed complaints.
• Self-exclusion records: Retained for the duration of the self-exclusion period plus 5 years, to prevent re-registration.
• Marketing consent records: Retained for 3 years from the date consent was given or withdrawn, as evidence of compliance.

5.3 Data Storage Location

h bazi's player data is stored on secure servers. All storage infrastructure is subject to encryption at rest and access is restricted to authorised h bazi personnel and contracted service providers on a strict need-to-know basis. Access logs are maintained and reviewed regularly as part of our security monitoring programme.

5.4 Data Deletion

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data (such as platform-wide betting volume statistics) may be retained indefinitely for research and operational planning purposes, as it cannot identify any individual player.

h bazi respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, contact our privacy team at [email protected]. We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

6.1 Right of Access

You have the right to request a copy of the personal data that h bazi holds about you. Upon a verified access request, we will provide you with a summary of the data categories we hold, the purposes for which each category is processed, the third parties with whom that data has been shared, and the applicable retention period. Your first access request in any 12-month period is provided free of charge.

6.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections — such as updating a contact email address or mobile number — can typically be made directly from your account settings page. Corrections to identity data (name, date of birth) require submission of supporting documentary evidence and are processed by the KYC team.

6.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing exists. As described in Section 5, certain categories of data are subject to mandatory retention periods under legal obligations; in these cases, we will delete the data as soon as the retention period expires and notify you accordingly.

6.4 Right to Restrict Processing

You may request that h bazi restrict the processing of your personal data in circumstances where you contest the accuracy of the data, where you object to processing based on legitimate interests, or where processing is unlawful but you prefer restriction over deletion. During a restriction period, h bazi will store your data but will not actively process it other than as required to maintain the restriction itself.

6.5 Right to Data Portability

For data that you have provided to us and that we process on the basis of your consent or the performance of our contract with you, you have the right to receive that data in a structured, machine-readable format (such as CSV or JSON). You may use this data for your own purposes or request that we transmit it directly to another service provider where technically feasible.

6.6 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, h bazi will cease sending marketing communications to you within 5 business days. This right is unconditional and does not require you to provide a reason.

h bazi implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. No digital platform can guarantee absolute security, but we apply industry best-practice standards to minimise risk to our players' data.

7.1 Technical Safeguards

• Transport Layer Security (TLS): All data transmitted between your browser or mobile device and h bazi's servers is encrypted using a minimum of TLS 1.2 with 256-bit cipher strength.
• Encryption at rest: Sensitive data fields — including identity document references, payment method identifiers, and account credentials — are encrypted in the database using AES-256 encryption.
• Password hashing: Account passwords are stored as one-way cryptographic hashes using a modern, salted hashing algorithm. h bazi staff cannot retrieve your plaintext password and will never ask you for it.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts via the security settings page. 2FA significantly reduces the risk of unauthorised account access.
• Intrusion detection: h bazi operates continuous intrusion-detection monitoring on its infrastructure, alerting security personnel to anomalous access patterns in real time.

7.2 Organisational Safeguards

• Access to player personal data is restricted to h bazi staff and contractors on a strict need-to-know basis, governed by role-based access controls.
• All staff with access to personal data receive data protection training as part of their onboarding and at regular intervals thereafter.
• Third-party service providers are vetted for security standards before being granted access to any h bazi data, and are subject to contractual data processing obligations.
• Internal access logs are maintained and reviewed periodically to detect any unauthorised internal data access.

7.3 Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of our players, h bazi will notify affected players by email as promptly as practicable. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps h bazi is taking to address the breach and mitigate its impact. Players are encouraged to change their account password immediately if they receive a breach notification.

h bazi reviews this Privacy Policy on a regular basis and updates it whenever our data processing practices change, when we introduce new services, or when applicable law requires it. The effective date shown at the top of this page will be updated each time a revised version is published.

8.1 How We Notify You of Changes

Where a change to this Privacy Policy is material — meaning it affects the way we collect, use, share, or retain your personal data in a manner that could impact your rights — we will notify registered players via the email address held on their account at least 14 days before the change takes effect. For minor, clarificatory changes that do not affect your rights, we will update the policy quietly and revise the effective date. We recommend bookmarking this page and reviewing it periodically.

8.2 Continued Use as Acceptance

Your continued use of the h bazi platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you disagree with a material change, you may close your account by contacting [email protected] before the change takes effect, and your remaining real-money balance will be returned to your registered payment method subject to identity verification.

8.3 Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data h bazi holds about you, please contact our privacy team using the details below. We are committed to responding to all privacy-related enquiries within five Bangladesh Standard Time (BST) business days.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Request" or "Privacy Enquiry"
• Response time: Within 5 BST business days for general enquiries; within 30 calendar days for formal rights requests