hibaji Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how hibaji ("hibaji", "we", "us", "our") collects, processes, stores, and shares personal data relating to individuals ("you", "Player", "User") who access or use the hibaji platform, available at hibaji.im, including all associated gaming, betting, payment, and account management services (collectively, the "Services").

hibaji is committed to handling your personal data responsibly and in accordance with recognised data protection principles. This Policy is designed to be clear, transparent, and written in plain English so that every player — regardless of technical background — can understand what information we hold and why.

By registering an Account with hibaji or continuing to use the Services after this Policy has been posted or updated, you acknowledge that you have read and understood its contents. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

hibaji may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or operational needs. Material changes will be communicated to registered players via Account notification or email. The "Last updated" date at the top of this page always reflects the most current version.

2. Data We Collect

hibaji collects personal data from you in several ways — directly when you register or use the Services, automatically through the technical operation of the platform, and in some cases from third-party sources used for identity verification and fraud prevention. The categories of data we may collect include:

• Identity Data Full name, date of birth, gender, and copies of government-issued identity documents (such as National ID card or passport) submitted during the Know Your Customer (KYC) verification process.
• Contact Data Mobile phone number, email address, and residential address (city, district, division) as provided during registration or account updates. For Bangladesh-based players, this typically includes a Dhaka, Chittagong, Sylhet, Khulna, or other divisional address.
• Financial and Payment Data Mobile wallet account details (bKash number, Nagad number, Rocket number, Upay ID), transaction amounts, deposit and withdrawal history, and bank account details where applicable. We do not store full card numbers or mobile banking PINs — payment credentials are handled by our authorised payment processors.
• Gaming and Betting Activity Data Game sessions played, bet history, wager amounts, game outcomes, bonus usage, win and loss records, and any responsible gaming tool activations (such as deposit limits or self-exclusion requests).
• Technical and Device Data IP address, device type, operating system, browser type and version, screen resolution, time zone, and unique device identifiers. This data is collected automatically when you access the hibaji platform.
• Usage and Navigation Data Pages visited, features accessed, session duration, click patterns, search queries entered within the platform, and referring URLs. This data helps us understand how players interact with the Services and identify areas for improvement.
• Communications Data Records of your interactions with our customer support team, including live chat transcripts, support ticket content, and any written correspondence sent to our support email address.

3. How We Use Your Data

hibaji processes your personal data only for legitimate, clearly defined purposes. We do not sell your personal data to third parties for their own marketing use. The primary purposes for which we use your data are:

Our Privacy Commitments

These six principles underpin how hibaji approaches data protection across every part of the platform.

4. Data Sharing and Third Parties

hibaji may share your personal data with carefully selected third-party organisations where necessary to deliver the Services, comply with legal obligations, or protect the security of the platform. All third-party processors engaged by hibaji are required to handle your data securely and only for the purposes for which it has been shared.

Payment Processors: When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or other supported payment methods, your transaction data is shared with the relevant payment service provider to process the transaction. These providers operate under their own privacy policies and security standards.

Identity Verification Providers: To comply with AML and KYC requirements, hibaji may share identity data (such as copies of your National ID or passport) with third-party identity verification services. These providers are contractually bound to process your data solely for the purpose of verifying your identity on behalf of hibaji.

Game Providers: Certain technical data (such as session identifiers and game outcome records) may be shared with our third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to enable the delivery of their games on the hibaji platform. These providers do not receive your full personal profile.

Legal and Regulatory Authorities: hibaji may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by applicable law or in response to a lawful request. We will always seek to limit such disclosures to the minimum data necessary to satisfy the relevant legal obligation.

5. Your Data Rights

As a hibaji player, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights in a timely and transparent manner.

To exercise any of these rights, please contact our support team via live chat on the hibaji platform or by email at [email protected] (plain text — not a clickable link). We will respond to all valid data rights requests within 30 calendar days of receipt. In some cases we may require you to verify your identity before processing a request.

6. Data Security and Breach Response

hibaji takes the security of your personal data seriously. We maintain a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These measures are reviewed and updated on a regular basis to keep pace with evolving security threats.

In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of affected players, hibaji will take immediate steps to contain the breach, assess its scope, and notify affected individuals as promptly as practicable. We will also fulfil any mandatory notification obligations to relevant authorities as required.

Your responsibilities: You also play an important role in keeping your Account data secure. Always use a strong, unique password for your hibaji Account, never share your login credentials with any third party, and log out of the platform when using shared or public devices. If you suspect your Account has been compromised, contact our support team immediately.

7. Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or the way hibaji handles your personal data, please get in touch with our team. We take all privacy enquiries seriously and aim to provide a thorough response within 10 business days.

You can reach our support team 24 hours a day, 7 days a week via the live chat function on the hibaji platform. For written privacy enquiries, contact us at [email protected] (plain text — not a clickable link), clearly marking your message as a "Privacy Enquiry" in the subject line.

For questions related to responsible gaming or account self-exclusion, please visit our dedicated Responsible Gaming page for guidance and available tools. For general questions about using the platform, our FAQ page covers the most common topics raised by hibaji players across Bangladesh.