hajbee Privacy Policy

1 Identity of the Data Controller

hajbee is operated by an internationally incorporated entity (hereinafter "the Company", "we", "us", or "hajbee"). The Company acts as the data controller for all personal information collected through the hajbee platform. As data controller, the Company determines the purposes and means by which your personal data is processed. For all data-related enquiries, you may contact us at [email protected]. All data protection correspondence should reference "Privacy Policy — Data Subject Request" in the subject line to ensure prompt routing to our data protection team.

1 Registration Data

When you create a hajbee account, we collect the following information:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used solely for age verification — you must be 21 or older).
• Email address and mobile phone number.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna) and postal code.
• Preferred username and encrypted password (passwords are never stored in plain text).
• Your chosen BDT payment method identifier (e.g., bKash mobile number, Nagad account reference).

2 Identity Verification (KYC) Data

To comply with our anti-money-laundering obligations and to verify that you meet the minimum age requirement of 21 years, hajbee may request the following documents at account opening or prior to processing a withdrawal:

• A copy of a valid government-issued photo ID (National Identity Card, passport, or driving licence).
• A recent utility bill or bank statement confirming your residential address (dated within 90 days).
• A selfie holding your ID document, where required for enhanced verification.
• Proof of payment method ownership (e.g., a screenshot of your bKash or Nagad wallet showing your registered mobile number).

KYC documents are stored in an encrypted document management system and are accessible only to authorised compliance staff. They are never used for marketing purposes and are not shared with third parties except as required by applicable law or by our licensed payment processors for fraud prevention.

3 Transaction and Financial Data

hajbee records all financial activity associated with your account, including deposit amounts and timestamps, withdrawal requests and processing status, bonus credits and wagering activity, and the payment method reference used for each transaction (e.g., a partial bKash number or Nagad transaction ID). We do not store full bank account numbers, full card numbers, or full mobile wallet PINs. All transaction records are retained for a minimum of five years in accordance with financial record-keeping obligations.

4 Gameplay and Betting Data

We collect a complete record of all bets placed, games played, wager amounts, outcomes, and session durations. This data is used to calculate account balances accurately, to detect potentially harmful gambling patterns and offer responsible gaming interventions, to investigate disputes, and to improve the platform's game offerings. Gameplay data is retained for the full lifetime of your account and for a minimum of five years following account closure.

5 Technical and Device Data

When you visit hajbee, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), screen resolution, referral URL, and the pages you visit within the hajbee platform along with timestamps. This data is used for fraud detection, security monitoring, platform performance optimisation, and to ensure the platform renders correctly across different devices used by our Bangladesh-based players.

6 Communications Data

If you contact hajbee via Live Chat, Telegram, or email, we retain a full record of that conversation, including the content of messages, timestamps, and the support agent who handled your query. These records are used to resolve disputes, maintain service quality, and train our support team. Communication records are retained for a minimum of three years.

1 Account Management and Service Delivery

The primary purpose for which we process your data is to provide you with a functional, secure gambling account. This includes creating and maintaining your account, verifying your identity and age, processing deposits and withdrawals in BDT, calculating and crediting bonuses, and providing customer support. Without this data, we cannot legally or technically operate your account.

2 Legal and Regulatory Compliance

hajbee is required by applicable law and by the terms of its operating licence to process certain personal data for compliance purposes. This includes conducting Know Your Customer (KYC) checks, performing anti-money-laundering (AML) screening, detecting and preventing fraud and collusion, reporting suspicious activity to relevant authorities where legally mandated, and maintaining financial records for the statutory retention periods. Processing for compliance purposes does not require your separate consent — it is a legal obligation.

3 Responsible Gaming Monitoring

hajbee uses gameplay and transaction data to monitor for behavioural patterns that may indicate problem gambling. This includes unusually rapid increases in wagering volume, frequent deposits immediately following losses, and requests to override responsible gaming limits. Where such patterns are identified, a member of our responsible gaming team may contact you proactively. This processing is carried out in your interest and is a condition of our platform operating licence.

4 Marketing Communications

With your explicit consent at the time of registration (or subsequently via your account notification settings), hajbee may send you promotional communications including bonus offers, tournament announcements, seasonal promotions (such as Eid, Pohela Boishakh, or BPL cricket season offers), and platform news. You may withdraw your consent to marketing communications at any time by adjusting your notification preferences in your account dashboard or by emailing [email protected] with the subject "Unsubscribe". Withdrawal of marketing consent does not affect service-related communications, which are sent regardless of marketing preference.

5 Platform Improvement and Analytics

Aggregated and anonymised usage data is used to understand how players navigate the hajbee platform, which game categories are most popular, where users encounter difficulties, and how the site performs across different mobile devices and network conditions prevalent in Bangladesh. This analytics processing uses data in a form that cannot reasonably be used to identify any individual player.

1 Payment Processors

To facilitate deposits and withdrawals in BDT, hajbee shares the minimum necessary account and transaction data with our payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank. Each payment partner processes your data in accordance with its own privacy policy and applicable Bangladesh Bank regulations. hajbee selects only payment partners that maintain appropriate data security standards and that are bound by contractual data processing agreements with us.

2 Game Providers

Games on the hajbee platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, a session token and your anonymous player ID are transmitted to the relevant game provider's servers to initialise your game session. No personally identifiable information (name, address, payment details) is transmitted to game providers. Game providers receive only the data required to run a fair, functional game session.

3 Regulatory and Law Enforcement Authorities

hajbee will disclose personal data to government bodies, law enforcement agencies, or financial intelligence units when required to do so by a valid legal order, court order, or applicable statutory obligation. We will not voluntarily disclose player data to any government authority without such a legal basis. Where permitted by law, we will notify you of any such disclosure.

4 Fraud Prevention and Self-Exclusion Databases

hajbee participates in industry-wide fraud prevention and responsible gaming databases. Where a player is found to have committed fraud, has self-excluded from any affiliated platform, or has been identified as a problem gambler requiring exclusion, relevant identifying information (such as an email address hash or device fingerprint) may be shared with those databases to prevent circumvention across multiple platforms. This sharing is carried out strictly for player protection and fraud prevention purposes.

5 No Sale of Personal Data

hajbee does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. We do not share your data with data brokers, advertising networks, social media platforms, or any entity that would use it to serve you advertising outside of the hajbee platform itself.

1 What Cookies We Use

hajbee uses the following categories of cookies and similar local storage mechanisms on the platform:

• Strictly Necessary Cookies: Required for the platform to function. These include your session authentication token, CSRF protection tokens, and currency/language preference storage. These cannot be disabled without breaking core platform functionality.
• Performance Cookies: Anonymous data on page load times, error rates, and navigation paths used to optimise platform performance across mobile networks in Bangladesh.
• Functional Cookies: Store your in-session preferences such as your last-visited game category, responsible gaming reminder intervals, and notification settings.
• Analytics Cookies: Aggregated, anonymised usage data to understand overall traffic patterns. No individual player is identifiable from analytics data.

2 Managing Your Cookie Preferences

You may control non-essential cookies through your mobile browser's privacy settings. Please note that disabling performance or functional cookies may impair certain platform features, including game launch speed and preference retention. Strictly necessary cookies cannot be disabled via browser settings without preventing login and account access entirely.

1 Technical Safeguards

hajbee implements a layered security architecture to protect your personal data. All data in transit between your device and our servers is encrypted using TLS 1.3 with 256-bit AES ciphers. Data at rest in our databases is encrypted using AES-256. Access to production databases containing personal data is restricted to a small number of authorised engineers and requires multi-factor authentication. Our infrastructure undergoes regular third-party penetration testing, and critical security patches are applied within 24 hours of release.

2 Organisational Safeguards

All hajbee staff and contractors who have access to personal data are bound by confidentiality agreements and receive data protection training on an annual basis. Access to personal data is granted on a strict need-to-know basis, and all internal access is logged and audited. In the event of a data breach that poses a risk to your rights and freedoms, hajbee will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

1 Retention Periods

hajbee retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention schedule is as follows:

• Account and registration data: For the lifetime of your account, plus a minimum of 5 years after account closure.
• KYC and identity documents: Minimum 5 years from the date of verification or account closure, whichever is later.
• Transaction and financial records: Minimum 5 years, as required by financial record-keeping regulations.
• Gameplay and betting records: Minimum 5 years from the date of each transaction.
• Customer support records: Minimum 3 years from the date of each interaction.
• Technical and device logs: Up to 12 months on a rolling basis, unless retained longer for active fraud investigations.
• Marketing consent records: Until consent is withdrawn, plus 2 years thereafter as an audit record.

2 Deletion Process

Once a retention period has elapsed and no legal obligation requires continued storage, hajbee securely deletes or permanently anonymises the relevant personal data. Secure deletion follows industry-standard data destruction procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and research purposes.

1 Amendment Process

hajbee reserves the right to update this Privacy Policy at any time. When material changes are made, we will update the "Last updated" date at the top of this page and, where the changes significantly affect how we process your data, we will notify you via your registered email address or via an in-platform notification. Your continued use of hajbee following the publication of a revised Privacy Policy constitutes your acceptance of those changes. If you do not accept the revised policy, you must stop using the platform and may request account closure by contacting [email protected].