hbagi Privacy Policy — How We Handle Your Personal Data

1.1 hbagi collects personal information from you in several ways: directly when you register or interact with the platform, automatically as you use the site, and occasionally from trusted third-party sources such as payment processors and identity verification services. The categories of information we collect are described in full below.

Registration & Account Information

1.2 When you create an hbagi account, we collect your full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number. This information is required to create and maintain your account, verify your identity, and comply with responsible gaming age-verification obligations. Providing inaccurate information at registration is a breach of hbagi's Terms & Conditions.

Identity Verification (KYC) Documents

1.3 As part of our Know Your Customer (KYC) process, hbagi may request copies of government-issued identity documents such as your National ID card (NID), passport, or driver's licence. We may also request a recent utility bill or bank statement as proof of address. These documents are used solely for identity verification purposes and are handled with the highest level of security.

Financial & Transaction Data

1.4 We collect records of all deposits, withdrawals, and bets placed through your hbagi account. For payment processing purposes, we record the payment method type (e.g., bKash, Nagad, Visa), the last four digits of card numbers where applicable, and transaction reference numbers. We do not store full card numbers, CVV codes, or mobile banking PINs.

Usage & Behavioural Data

1.5 When you use hbagi, our systems automatically record information about your interactions with the platform. This includes pages visited, games played, bet history, session duration, device type, operating system, browser type and version, IP address, and referring URL. This data is used to operate the platform securely, detect fraud, and improve the user experience.

Communications Data

1.6 If you contact hbagi support, we retain records of that correspondence — including live chat transcripts, emails sent to [email protected], and any documents you share — for the purposes of resolving your query, training our support team, and maintaining a record of any commitments or undertakings made.

2.1 hbagi uses the personal data we collect for the following clearly defined purposes. We will not use your data for any purpose that is incompatible with those listed below without first informing you and, where required, obtaining your consent.

• Account Operation: To create, maintain, and manage your hbagi player account, including processing deposits, settling bets, and handling withdrawal requests.
• Identity & Age Verification: To verify that you are who you say you are and that you meet the minimum age requirement of 18 years, in compliance with our responsible gaming obligations.
• Payment Processing: To facilitate deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain accurate financial records of all transactions.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, money laundering, and other illegal or prohibited activities on the platform.
• Responsible Gaming: To monitor your betting and deposit patterns in order to identify signs of problem gambling, apply responsible gaming tools such as deposit limits and cooling-off periods, and reach out proactively where our systems indicate a potential concern.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and maintain records of support interactions for quality assurance.
• Platform Improvement: To analyse anonymised usage and behavioural data in aggregate to improve hbagi's products, features, game selection, and overall user experience.
• Legal & Regulatory Compliance: To comply with applicable laws, respond to lawful requests from regulatory bodies or law enforcement authorities, and maintain records required under anti-money laundering and financial regulations.
• Promotional Communications: To send you information about hbagi promotions, bonuses, and special offers relevant to BPL cricket season, IPL, Eid, Pohela Boishakh, and other events — but only where you have opted in to receive such communications. You can unsubscribe at any time.

2.2 hbagi does not use your personal data for automated decision-making that produces legal effects on you — for example, we do not use fully automated systems to permanently close accounts without human review. Where automated tools are used for initial fraud flagging or responsible gaming alerts, these always trigger a manual review by hbagi's compliance team before any significant account action is taken.

3.1 hbagi does not sell your personal data to any third party. We share your information only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

Payment Service Providers

3.2 To process your deposits and withdrawals, hbagi shares the minimum necessary payment information with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and card payment gateways for Visa and Mastercard. These partners process your payment data under their own privacy policies and are bound by contractual obligations to handle your data securely and only for the purpose of processing the relevant transaction.

Identity Verification Partners

3.3 Where required for KYC purposes, hbagi may share identity document data with third-party identity verification service providers. These providers are carefully vetted and are contractually required to process identity data solely for verification purposes, to maintain appropriate security standards, and to delete document copies once verification is complete.

Game Providers

3.4 hbagi integrates games from third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. A limited set of technical identifiers (such as a pseudonymous session token) is shared with game providers purely for the purpose of rendering the game, recording game outcomes, and ensuring fair play. Game providers do not receive your full personal profile or payment details.

Legal & Regulatory Disclosure

3.5 hbagi may disclose personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by applicable law, a valid court order, or a lawful regulatory request. In such cases, hbagi will disclose only the specific data required by the request and will, where legally permitted, notify the affected player that a disclosure has been made.

3.6 In the event that hbagi undergoes a business restructuring, merger, or acquisition, player account data may be transferred to the successor entity as part of that transaction. hbagi will notify affected players of any such transfer and the successor entity will be bound by the terms of this Privacy Policy or an equivalent standard of data protection.

4.1 hbagi uses cookies and similar tracking technologies (such as browser local storage and session tokens) to operate the platform effectively, maintain your login session, and gather anonymised analytics about how players use the site. This section explains each category of cookie we use and the purpose it serves.

4.2 hbagi does not use third-party advertising cookies, social media tracking pixels, or behavioural retargeting cookies. We do not allow external ad networks to place cookies on hbagi pages.

4.3 You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is stored. Please be aware that disabling strictly necessary or security cookies will prevent hbagi from functioning correctly and may result in your session being terminated.

5.1 hbagi implements a multi-layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, alteration, or disclosure. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and hbagi servers is encrypted using industry-standard SSL/TLS protocols. The padlock symbol in your browser confirms an active secure connection.
• Encrypted Data Storage: Sensitive personal data fields stored in hbagi's databases — including identity document references and payment tokens — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within hbagi's internal systems is restricted on a strict need-to-know basis. Staff members can only access the data required to perform their specific role. All internal data access is logged and audited.
• Two-Factor Authentication: hbagi supports two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA to add an additional layer of protection beyond their password.
• Penetration Testing & Security Audits: hbagi's platform undergoes periodic security testing to identify and remediate vulnerabilities before they can be exploited.
• Fraud Detection Systems: Real-time automated monitoring systems analyse login patterns, transaction behaviour, and device fingerprints to detect and respond to potential security incidents without delay.

5.2 In the event of a personal data breach that poses a risk to player rights and freedoms, hbagi will notify affected players without undue delay via the email address registered to their account. The notification will describe the nature of the breach, the data affected, and the steps hbagi has taken or is taking in response.

5.3 While hbagi employs robust security measures, no online platform can guarantee absolute protection against all possible threats. Players are responsible for keeping their own account credentials — including passwords and bKash/Nagad PINs — confidential and for reporting any suspected unauthorised access to hbagi support immediately.

6.1 As an hbagi player, you have the following rights in relation to your personal data. To exercise any of these rights, contact hbagi support at [email protected] with a clear description of your request. hbagi will respond within a reasonable timeframe and, in any case, within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data that hbagi holds about you. We will provide this in a clear, structured format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details directly from within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Please note that this right is subject to hbagi's legal retention obligations — we cannot delete data that we are required to retain by law, such as financial transaction records.
• Right to Restriction of Processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that we restrict our processing of your data to storage only.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a machine-readable format suitable for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests, subject to hbagi's overriding legitimate grounds.
• Right to Withdraw Consent: Where hbagi processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6.2 Marketing Opt-Out. If you have previously opted in to receive promotional communications from hbagi — for example, bonus offers during BPL cricket season or Eid special promotions — you may opt out at any time by clicking the unsubscribe link in any marketing email, or by contacting support and requesting removal from the marketing list. Opting out of marketing does not affect the receipt of transactional communications such as deposit confirmations, withdrawal notifications, or security alerts.

7.1 hbagi retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and dispute-resolution obligations. The retention periods applicable to different categories of data are summarised below.

7.2 Once a retention period has expired, hbagi will securely delete or anonymise the relevant data so that it can no longer be associated with any individual player. Anonymised, aggregated data (for example, platform-wide betting statistics with all personal identifiers removed) may be retained indefinitely for analytical purposes.

7.3 Where a player submits a valid erasure request under their data rights (Section 6), hbagi will delete the relevant data ahead of the standard retention schedule unless retention is required by law, regulation, or an ongoing legal proceeding.

8.1 hbagi reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, new platform features, or feedback from players. The effective date at the top of the policy will always reflect the date of the most recent revision.

8.2 Where changes to this Privacy Policy are material — for example, a significant change to the categories of data we collect, a new category of third-party sharing, or a change to the legal basis on which we process your data — hbagi will provide advance notice to registered players via their registered email address and/or a prominent notice on the platform at least 14 days before the changes take effect.

8.3 For minor or clarificatory changes that do not materially affect your rights or our data practices, hbagi may update the policy without individual notification. It is your responsibility to review this Privacy Policy periodically to remain informed of any updates.

8.4 Your continued use of hbagi following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a revised policy, you should cease using hbagi and may request account closure and deletion of your data as described in Section 6.

8.5 This Privacy Policy is written in English and governs the relationship between hbagi and all players accessing the platform from Bangladesh. In the event of any inconsistency between this English version and any translated summary, the English text shall prevail.