habajji Privacy Policy

1 Information We Collect

habajji collects personal data from you through several channels — directly when you register an account or contact support, automatically when you navigate the platform, and occasionally from verified third-party sources used for identity and payment verification. We collect only what is necessary to operate the platform safely and compliantly.

1.1 Information You Provide Directly

When you register a habajji account, make a deposit, request a withdrawal, or contact our support team, you provide us with personal information that may include:

• Full legal name, as it appears on your Bangladesh National Identity Card (NID).
• Date of birth, used to verify that you are at least 18 years of age.
• Personal email address and Bangladesh mobile number.
• Mobile wallet account details for bKash, Nagad, Rocket, or Upay transactions.
• Copies of identity documents submitted during the KYC verification process (NID, passport, or driving licence).
• Communications you send to habajji via live chat, email, or WhatsApp, including support requests and complaints.
• Responses to voluntary surveys or promotional questionnaires.

1.2 Information Collected Automatically

When you access or use the habajji platform — whether through a web browser or mobile device — we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location derived from it.
• Device type, operating system, browser type and version.
• Pages visited, sections clicked, time spent on each page, and navigation paths.
• Betting and gaming activity, including wagers placed, games played, session duration, and transaction history.
• Login timestamps and session identifiers associated with your habajji Login credentials.
• Referral source (the website or link that directed you to habajji, if applicable).

1.3 Information from Third Parties

In certain circumstances, habajji may receive personal data about you from trusted third-party sources, including:

• Identity verification and KYC service providers, used to cross-check the documents you submit.
• Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay) who confirm the status and ownership of transactions.
• Fraud detection and anti-money laundering (AML) screening services.

2 How We Use Your Data

habajji uses the personal data collected from you for clearly defined, legitimate purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we process your data are set out in the table below.

2.1 Marketing Communications

habajji will only send you promotional emails, SMS messages, or WhatsApp notifications regarding bonuses, tournaments, and seasonal offers — such as BPL promotions, Eid offers, or T20 World Cup specials — if you have explicitly opted in to receive marketing communications during registration or through your account settings. You may withdraw consent at any time by updating your communication preferences in your account dashboard or by contacting habajji support.

2.2 Automated Decision-Making

habajji uses automated systems to detect unusual account activity, assess fraud risk, and enforce responsible gaming triggers such as deposit limit breaches or extended play sessions. These systems may result in temporary account restrictions pending a manual review. Where an automated decision has a significant effect on your account — such as a temporary suspension — you have the right to request human review of that decision by contacting habajji support.

3 Data Sharing & Disclosure

habajji does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. We share your data only in the limited scenarios described below, and only to the extent strictly necessary for the stated purpose.

3.1 Service Providers and Data Processors

habajji engages carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include:

• KYC and identity verification providers — to authenticate the documents you submit during account verification.
• Payment processors — including the operators of bKash, Nagad, Rocket, and Upay, for the sole purpose of processing your deposit and withdrawal transactions.
• Game software providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive anonymised session identifiers necessary to operate their games.
• Cloud hosting and infrastructure providers — who store platform data in encrypted form on secure servers.
• Fraud detection and AML screening services — to protect all habajji players from financial crime.

All service providers are bound by strict data processing agreements that prohibit them from using your data for their own purposes or sharing it further without habajji's authorisation.

3.2 Legal and Regulatory Disclosure

habajji may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or legitimate regulatory investigation. In such cases, habajji will disclose only the minimum data necessary to satisfy the legal requirement and will, where permitted by law, notify the affected player of the disclosure.

4 Cookies & Tracking Technologies

habajji uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and analyse how users interact with the site. This section explains the types of cookies we use and how you can manage them.

4.1 Types of Cookies Used

4.2 Managing Cookies

Strictly necessary cookies cannot be disabled without breaking core platform functionality such as your habajji Login session. All other cookie categories can be managed through your browser settings. Most modern browsers allow you to block or delete cookies via the Settings or Privacy menu. Please note that disabling functional or analytics cookies may affect your experience on the habajji platform — for example, your game display preferences may not be saved between sessions.

5 Data Security

habajji applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Security is treated as a continuous operational discipline, not a one-time implementation.

5.1 Technical Safeguards

• 256-bit SSL/TLS encryption is applied to all data transmitted between your device and habajji's servers, including your habajji Login session and all financial transactions.
• Sensitive data — including identity document scans and payment details — is stored in encrypted form using AES-256 encryption at rest.
• habajji's systems are protected by enterprise-grade firewalls, intrusion detection systems, and regular third-party penetration testing.
• Access to personal data is restricted to habajji staff and authorised contractors on a strict need-to-know basis, enforced through role-based access controls.
• All internal access to sensitive player data is logged and subject to regular audit review.

5.2 Your Role in Account Security

While habajji maintains robust security infrastructure, the security of your habajji Login credentials is also your responsibility. You should use a strong, unique password for your habajji account, enable SMS-based two-factor authentication, and never share your login details with any other person. habajji will never contact you asking for your password by any channel.

5.3 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, habajji will take immediate containment action and notify affected players as promptly as practical. habajji maintains a documented data breach response procedure that is tested and reviewed on a regular basis.

6 Data Retention

habajji retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, habajji will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you as an individual. Data held beyond the minimum retention period for ongoing dispute resolution or legal proceedings will be deleted promptly once those proceedings are concluded.

7 Your Privacy Rights

habajji recognises and respects your rights as a data subject. The following rights are available to all registered habajji players in relation to the personal data we hold about them.

7.1 Right of Access

You have the right to request a copy of all personal data that habajji holds about you. Upon receipt of a verified access request, habajji will provide you with a structured summary of your personal data within 30 days. There is no fee for a standard access request.

7.2 Right to Rectification

If any personal data that habajji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For data that you can update directly — such as your email address or mobile number — you may do so through your account settings following habajji Login. For data that requires document verification to correct, such as your legal name or date of birth, please contact habajji support.

7.3 Right to Erasure

You may request that habajji delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent and there is no other legal basis for processing. Please note that habajji is subject to legal data retention obligations — particularly in relation to financial transaction records and KYC documents — that may mean we are unable to delete all data immediately upon request. In such cases, habajji will delete the data as soon as the legal retention period expires.

7.4 Right to Restrict Processing

You have the right to request that habajji restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of data is being resolved.

7.5 Right to Object

Where habajji processes your personal data on the basis of legitimate interest — including platform analytics and fraud prevention — you have the right to object to that processing. habajji will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

7.6 Right to Withdraw Marketing Consent

If you have consented to receive promotional communications from habajji, you may withdraw that consent at any time. You can do this through your account notification preferences or by contacting habajji support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

8 Contact & Privacy Queries

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or have a concern about how habajji has handled your personal data, please contact the habajji privacy team using the details below.

8.1 Privacy Contact Details

All privacy-related correspondence should be directed to:

• Email: [email protected] (subject line: "Privacy Policy Query")
• Live Chat: Available 24/7 directly on the habajji platform after habajji Login
• WhatsApp: +880 1700 000000

habajji's support team is available around the clock and has full familiarity with privacy matters specific to the Bangladesh market, including queries related to bKash and Nagad transaction data.

8.2 Policy Updates

habajji reviews and updates this Privacy Policy periodically to reflect changes in platform features, applicable law, and best-practice standards. When material changes are made, habajji will notify registered players via email or an in-platform notification. The effective date of the current version is always displayed at the top of this page. Continued use of the habajji platform after a policy update constitutes acceptance of the revised terms.