Privacy Policy — hajbee Online Gaming

1 Introduction

hajbee ("we", "us", "the Platform", or "hajbee") operates the online gaming website accessible at https://hajbee.net. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, visitors, and prospective users. This Privacy Policy sets out in clear, plain terms the data we collect, the purposes for which we use it, the legal basis for processing, the parties with whom we may share it, and the rights available to you.

This Privacy Policy applies to all personal data collected through hajbee's website, mobile site, customer support channels, and any other touchpoint through which you interact with the hajbee brand. It should be read alongside our Terms & Conditions, which govern the overall use of the hajbee platform. In the event of any conflict between this Policy and the Terms & Conditions on a data protection matter, this Privacy Policy prevails.

We take a data-minimisation approach: we collect only the personal data that is genuinely necessary to deliver our services, meet our legal obligations, and protect the security of the platform and its users. We do not sell personal data to third parties for commercial marketing purposes, and we do not engage in any data practices that we would not be comfortable disclosing fully to our players.

2 Data We Collect

The categories of personal data we collect depend on the nature of your interaction with hajbee. The table below summarises the main data categories, the specific data points within each, and the primary source of that data.

2.1 Data We Do Not Collect

hajbee does not intentionally collect any of the following special categories of sensitive personal data: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, health data (beyond age verification), or data concerning a person's sex life or sexual orientation. If any such data is inadvertently included in a document submitted for KYC purposes, it will not be processed, stored, or used for any purpose other than identity verification, and will be securely deleted upon completion of the verification process.

3 How We Use Your Data

hajbee uses your personal data strictly for the purposes set out below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent.

3.1 Account Registration and Management

We use your identity and contact data to create and manage your hajbee account, verify your identity and age, communicate important account-related notices, and enable you to access the full range of services available on the platform including deposits, withdrawals, sports betting, live casino, slots, and promotional offers.

3.2 Payment Processing

We use your financial data to process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or other supported options), verify that payment accounts are registered in your own name, detect and prevent fraudulent transactions, and maintain accurate financial records.

3.3 Legal and Regulatory Compliance

We are required to process certain categories of your personal data to comply with applicable anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, responsible gaming regulations, and any lawful requests received from competent authorities. Compliance with these obligations is non-negotiable and forms a core part of our data processing activities.

3.4 Responsible Gaming

We analyse your gaming and betting data to identify patterns that may indicate problem gambling behaviours — for example, unusually rapid increases in wager frequency or amounts, or patterns consistent with chasing losses. This analysis enables us to proactively offer responsible gaming tools such as deposit limits, session time reminders, and cooling-off periods, and to intervene where player welfare is at risk. This processing is carried out in the interests of player welfare and is a fundamental part of our commitment to responsible gaming.

3.5 Security and Fraud Prevention

We use technical data and gaming activity data to detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, account hacking, and other forms of platform abuse. This includes automated monitoring systems and manual review by our security team.

3.6 Customer Support

We use communications data and account data to respond to your support enquiries, resolve disputes, investigate complaints, and provide assistance with technical issues. Support interactions may be recorded for quality assurance and training purposes.

3.7 Platform Improvement

We use aggregated and anonymised technical and gaming data to understand how players use the platform, identify popular game categories, optimise page load performance, and improve the overall user experience. This analysis is performed on data that cannot be used to identify any individual player.

3.8 Marketing Communications

Where you have provided your explicit consent to receive marketing communications, we may use your contact data to send you promotional offers, bonus announcements, seasonal promotions (such as Eid or Pohela Boishakh special offers), and BPL or T20 season betting promotions via email or SMS. You may withdraw your marketing consent at any time by contacting us at [email protected] or by using the unsubscribe mechanism in any marketing message. Withdrawal of marketing consent does not affect your ability to use the platform.

4 Legal Basis for Processing

Every instance of personal data processing at hajbee is supported by one or more of the following lawful bases:

5 Data Sharing & Disclosure

hajbee does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the circumstances described below, and only to the extent strictly necessary for each purpose.

5.1 Payment Processors

We share financial and identity data with our payment processing partners — including mobile financial service providers such as bKash, Nagad, Rocket, and Upay, and banking partners including Dutch-Bangla Bank, City Bank, and BRAC Bank — solely to authorise and settle your deposit and withdrawal transactions. These providers process your payment data under their own privacy policies and are contractually bound to use your data only for payment processing purposes.

5.2 Identity Verification Services

We may share identity documents and personal data with third-party KYC and identity verification service providers to carry out the verification checks required under our AML and responsible gaming obligations. These providers are engaged under strict data processing agreements and are not permitted to use your data for any other purpose.

5.3 Game Providers

The casino and live gaming products on hajbee are powered by third-party game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games and settle outcomes correctly, limited gameplay data (such as session identifiers and wager amounts) may be shared with the relevant game provider for that session. These providers do not receive your full identity or financial data.

5.4 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent governmental bodies where we are legally required to do so, or where disclosure is necessary to prevent or investigate criminal activity, fraud, or other unlawful conduct. We will endeavour to notify you of any such disclosure where legally permissible to do so.

5.5 Business Transfers

In the event that hajbee undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material change to the privacy practices applicable to your data before the transfer takes effect.

6 Cookies & Tracking Technologies

hajbee uses cookies and similar tracking technologies to operate the platform, improve user experience, and support our security and analytics functions. A cookie is a small text file placed on your device when you visit a website. The table below describes the categories of cookies used on the hajbee platform.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please be aware that blocking strictly necessary cookies may impair the functionality of the hajbee platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

7 Data Retention

hajbee retains personal data only for as long as is necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account, and for a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial record-keeping requirements.
• KYC Verification Documents: Retained for the duration of the account and for five (5) years following account closure or the completion of the KYC process, whichever is later.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, or for five (5) years if the communication relates to a dispute or complaint.
• Gaming and Betting Logs: Retained for three (3) years for responsible gaming monitoring purposes, and for up to five (5) years where required for dispute resolution or regulatory compliance.
• Technical and Log Data: Retained for up to twelve (12) months for security and fraud prevention purposes, after which it is deleted or anonymised.
• Marketing Consent Records: Retained for the period during which you remain opted in, and for one (1) year following your opt-out, as evidence of your consent history.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

8 Data Security

hajbee takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the hajbee platform is encrypted using industry-standard SSL/TLS protocols. This protects your login credentials, payment details, and personal information from interception in transit.
• Encryption at Rest: Sensitive data fields — including passwords (stored as one-way cryptographic hashes), payment method references, and KYC document data — are encrypted at rest within our database infrastructure.
• Access Controls: Access to personal data within hajbee's internal systems is restricted on a strict need-to-know basis. Employees and contractors with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Multi-Factor Authentication: Administrative access to systems that store personal data requires multi-factor authentication. We strongly encourage all hajbee players to use strong, unique passwords for their accounts.
• Intrusion Detection and Monitoring: Our infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous data transfer patterns.
• Regular Security Audits: hajbee engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of our platform infrastructure.

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you become aware of any actual or suspected security vulnerability or unauthorised access to your account, please notify us immediately at [email protected].

9 Your Rights

As a data subject, you have a number of rights in relation to the personal data hajbee holds about you. These rights are summarised below. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request". We will acknowledge your request within three (3) business days and aim to fulfil it within thirty (30) calendar days, subject to identity verification and any applicable legal exemptions.

9.1 Right of Access

You have the right to request a copy of the personal data hajbee holds about you, along with information about the purposes for which it is processed, the categories of data held, the recipients with whom it has been shared, and the retention period applicable to your data.

9.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. You may also update certain account details directly through your account settings.

9.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that this right is not absolute — we may be required to retain certain data to comply with legal obligations (see Section 7 on Data Retention).

9.4 Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or where you have objected to processing based on legitimate interests and a determination is pending.

9.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another data controller where technically feasible.

9.6 Right to Object

You have the right to object to the processing of your personal data where it is based on hajbee's legitimate interests. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless processing is necessary for the establishment, exercise, or defence of legal claims. You may object to marketing processing at any time with unconditional effect.

9.7 Right to Withdraw Consent

Where processing is based solely on your consent (such as marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

10 Children's Privacy

The hajbee platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from any individual under the age of 18. Our registration process requires all applicants to confirm their date of birth, and KYC verification includes mandatory age verification as a standard step.

If we discover, at any stage, that a person under the age of 18 has registered an account or provided personal data to hajbee, we will immediately suspend the account, void any associated transactions, and securely delete all personal data relating to that individual. If you believe that a minor may have accessed or registered on the platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11 International Data Transfers

hajbee primarily processes and stores personal data within server infrastructure located in data centres that serve the Asia-Pacific region. However, in the course of delivering our services, some personal data may be transferred to or processed by third-party service providers (such as game providers or identity verification services) whose operations are based in other countries.

Whenever personal data is transferred internationally, hajbee takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. Such safeguards may include contractual data processing agreements with the receiving party, standard contractual clauses, or reliance on the adequacy of the data protection framework in the destination country.

By using the hajbee platform and providing us with your personal data, you acknowledge that your data may be transferred to and processed in countries outside Bangladesh. You may contact us at [email protected] to request further information about the specific safeguards applicable to any international transfer of your data.

12 Third-Party Links

The hajbee platform may contain references to third-party game providers, payment services, or other external services. Where the platform integrates third-party services (such as live casino games from Evolution Gaming or Pragmatic Play), those services operate under their own privacy policies, which are independent of and separate from this Privacy Policy. hajbee is not responsible for the data practices of third-party game providers or payment processors, and we encourage you to review their respective privacy policies before interacting with their services.

hajbee does not endorse or make any representations about third-party websites or services, and we accept no liability for any damage or loss arising from your use of or reliance on any third-party content, products, or services.

13 Changes to This Privacy Policy

hajbee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal or regulatory requirements, or the introduction of new platform features. When material changes are made to this Policy, we will notify active registered players through a prominent notice on the platform or by direct communication to the contact details associated with your account, at least seven (7) days before the changes take effect.

The most current version of this Privacy Policy will always be available at https://hajbee.net/privacy-policy and will be identified by the "Last updated" date at the top of the document. Your continued use of the hajbee platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you have the right to close your account in accordance with Section 12.1 of the Terms & Conditions, and to request deletion of your personal data in accordance with Section 9.3 of this Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hajbee handles your personal data, please contact our Data Protection team using the details below. We aim to acknowledge all data protection enquiries within three (3) business days and to resolve them fully within thirty (30) calendar days (Bangladesh Standard Time, UTC+6).

• Email: [email protected]
• Subject Line (for data requests): "Data Subject Request — [Your Request Type]"
• Response Language: English
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Target Response Time: Within 3 business days for acknowledgement; within 30 calendar days for resolution

For urgent security matters — such as suspected unauthorised access to your account or a potential data breach — please include "URGENT SECURITY" in your email subject line so that our security team can prioritise your case immediately.