Privacy Policy — How habaji Collects, Uses, and Protects Your Data

This Privacy Policy ("Policy") describes how habaji ("habaji", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at habaji.bio, collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who register an account, access the habaji platform, or otherwise interact with our Services.

habaji is committed to handling your personal data responsibly, transparently, and securely. We collect only the data that is necessary to deliver a safe, compliant, and personalised gaming experience. We do not sell your personal data to third parties for marketing or commercial purposes.

By registering an account with habaji or continuing to use the habaji platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not register an account or access the habaji Services.

This Policy should be read alongside habaji's Terms & Conditions and Responsible Gaming guidelines, both of which are incorporated by reference.

1. Information We Collect

1.1 Information You Provide Directly

When you register a habaji account, complete KYC identity verification, make a deposit or withdrawal, or contact our support team, you provide us with personal data including:

• Your full legal name, date of birth, gender, and nationality.
• Your current residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postcode.
• Your email address and registered mobile phone number.
• Government-issued identification documents such as a National ID card, passport, or driving licence.
• Payment method details including bKash mobile number, Nagad account reference, Rocket account reference, Upay account reference, bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), or Visa/Mastercard card details where applicable.
• Any information you provide when communicating with habaji support staff, including correspondence content and attachments.

1.2 Information Collected Automatically

When you access the habaji platform, our systems automatically collect certain technical data, including:

• Your IP address and approximate geographic location derived from that IP address.
• Device type, operating system, browser type and version, and screen resolution.
• Session duration, pages visited, features accessed, and click-path data.
• Time-stamped records of all login events, deposit and withdrawal transactions, game rounds played, and sports bets placed.
• Cookies and similar tracking technologies as described in Section 8 of this Policy.

1.3 Information from Third Parties

habaji may receive personal data about you from trusted third-party partners where this is necessary for compliance or fraud prevention purposes. This may include identity verification data from KYC service providers, transaction confirmation data from payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard), and risk-scoring data from fraud detection services.

2. How We Use Your Personal Data

habaji processes your personal data for the following purposes:

2.1 Account Management and Service Delivery

To register your account, verify your identity, process deposits and withdrawals in Bangladeshi Taka (৳ BDT), provide access to casino games and sports betting markets, and deliver customer support services.

2.2 Legal and Regulatory Compliance

To fulfil our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements, enforce age verification (21+ policy), maintain mandatory transaction records, and respond to lawful requests from competent authorities.

2.3 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, money laundering, and other forms of misconduct that could harm habaji or its players.

2.4 Responsible Gaming

To monitor player activity for signs of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and provide timely interventions in line with habaji's Responsible Gaming commitments.

2.5 Platform Improvement and Analytics

To analyse aggregated, anonymised usage data to improve the habaji platform, optimise game availability, enhance user experience, and inform product development decisions. Individual players are not identified in analytical reporting.

2.6 Marketing Communications

Where you have provided explicit consent, to send you promotional emails or SMS messages about new games, bonuses, seasonal offers (such as Eid, Pohela Boishakh, or IPL/BPL promotions), and platform updates. You may withdraw consent to marketing communications at any time by contacting [email protected].

3. Legal Basis for Processing

habaji processes your personal data on one or more of the following legal bases:

• Contractual necessity — processing is required to fulfil habaji's obligations under the account agreement with you, including providing gaming Services and processing financial transactions.
• Legal obligation — processing is required to comply with applicable laws, including AML obligations, KYC requirements, and tax record-keeping.
• Legitimate interests — processing is necessary for habaji's legitimate interests in operating a safe, commercially viable, and fraud-free gaming platform, provided that such interests are not overridden by your data protection rights.
• Consent — where we rely on your explicit consent, such as for marketing communications, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing Your Personal Data

habaji does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

4.1 Payment Service Providers

bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, solely to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.

4.2 Identity Verification Providers

Third-party KYC and identity verification services engaged by habaji to validate government-issued identity documents and confirm that players meet the 21+ age requirement.

4.3 Game Content Providers

Game studio partners including Pragmatic Play, Microgaming, NetEnt, Spribe, Evolution Gaming, and Ezugi may receive limited technical data (such as a pseudonymous player session token) to facilitate game delivery. These providers do not receive your full personal profile.

4.4 Fraud Prevention and Security Services

Specialist fraud detection and cybersecurity providers engaged by habaji to monitor for suspicious activity, detect bot usage, and protect the integrity of the platform.

4.5 Legal and Regulatory Authorities

habaji may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. habaji will notify you of any such disclosure where legally permitted to do so.

5. Data Retention

5.1 habaji retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. As a general guide:

• Account registration data and KYC documents are retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping obligations.
• Transaction records (deposits, withdrawals, game history, sports betting history) are retained for a minimum of five (5) years.
• Marketing consent records are retained for the duration of your account and for three (3) years following any withdrawal of consent.
• Technical logs and session data are retained for up to twelve (12) months for security and fraud investigation purposes.

5.2 When personal data is no longer required for any lawful purpose, habaji will securely delete or anonymise that data in a manner that prevents re-identification.

6. Your Data Rights

As a habaji player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected]. habaji will respond to all data rights requests within 30 days of receipt.

• Right of Access — You have the right to request a copy of the personal data habaji holds about you, along with information about how it is processed.
• Right of Rectification — You have the right to request correction of any inaccurate or incomplete personal data held by habaji.
• Right to Erasure — In certain circumstances, you have the right to request the deletion of your personal data. This right may be limited where habaji is required to retain data to comply with legal obligations.
• Right to Restriction — You have the right to request that habaji restricts the processing of your personal data in certain circumstances, such as where the accuracy of that data is disputed.
• Right to Object — You have the right to object to processing carried out on the basis of habaji's legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent — Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting prior lawful processing.

habaji will not charge a fee for responding to a data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

7. Security Measures

7.1 habaji applies a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the habaji platform.
• Encryption of sensitive data fields (including payment details and identity document references) at rest in our secure databases.
• Role-based access controls ensuring that habaji staff can only access personal data to the extent necessary for their specific job function.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Anomaly-detection systems that flag unusual login behaviour, suspicious transaction patterns, or potential account compromise in real time.
• Secure data backup procedures with tested recovery protocols.

7.2 While habaji takes every reasonable precaution to safeguard your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, habaji will notify affected players without undue delay.

7.3 You play an important role in account security. habaji strongly recommends that you use a strong, unique password for your account, enable any available two-factor authentication, and notify support immediately at [email protected] if you suspect unauthorised access.

8. Cookies and Tracking Technologies

8.1 habaji uses cookies and similar technologies (such as pixel tags and session tokens) to operate the platform, remember your preferences, maintain your login session, and analyse platform usage. Cookies are small text files placed on your device when you access habaji.bio.

8.2 habaji uses the following categories of cookies:

• Strictly Necessary Cookies — Required for the habaji platform to function. These include session authentication tokens and security cookies. These cannot be disabled.
• Functional Cookies — Remember your preferences such as preferred language, display settings, and last-visited game categories to provide a more personalised experience.
• Analytics Cookies — Collect anonymised data about how players use habaji to help us improve platform performance, navigation, and game discoverability.
• Security Cookies — Used by our fraud detection systems to identify unusual session behaviour and protect your account from unauthorised access.

8.3 You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the habaji platform. Strictly necessary cookies cannot be disabled as they are essential to platform operation.

9. Third-Party Services and Links

9.1 The habaji platform integrates third-party game content from providers including Pragmatic Play, Microgaming, NetEnt, Spribe, Evolution Gaming, and Ezugi. These providers operate their own data processing practices under their respective privacy policies. habaji is not responsible for the privacy practices of third-party game studios.

9.2 The habaji platform does not currently contain links to external third-party websites for commercial or promotional purposes. Where any such links are introduced in the future, habaji will make clear that those destinations are external and outside habaji's control.

10. Players Under 21

10.1 The habaji platform is strictly for adults aged 21 and above. habaji does not knowingly collect or process personal data from individuals under the age of 21. If you are under 21, you must not register an account or attempt to access the habaji Services.

10.2 If habaji discovers or has reasonable grounds to believe that a player is under 21 years of age, habaji will immediately close that account, return any deposits made, forfeit any associated winnings, and securely delete the personal data collected, subject to any overriding legal retention obligations.

10.3 If you believe a minor has registered a habaji account, please contact [email protected] immediately so that the matter can be investigated and remedied promptly.

11. Changes to This Privacy Policy

11.1 habaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or platform operations. Where changes are material, habaji will notify registered players via email or an on-platform notification at least seven (7) days before the revised Policy takes effect.

11.2 The most current version of this Privacy Policy is always accessible at habaji.bio/privacy-policy. The "Last updated" date at the top of this page reflects when the Policy was most recently revised. Continued use of the habaji platform following notification of changes constitutes acceptance of the revised Policy.

12. Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which habaji processes your personal data, please contact our support team. All data-related enquiries are handled by habaji's dedicated compliance team.

Support email: [email protected] (plain text — not a clickable link)

Response time: habaji aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 calendar days of receipt.

Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).