hibaj Privacy Policy — How We Protect Your Data

hibaj is the data controller responsible for personal data collected through the hibaj platform. For the purposes of this Policy, "hibaj", "we" and "our" refer to the operating entity behind the hibaj platform at https://hibaj.vip. If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data concern, you can contact us at any time via [email protected]. Our support team operates 24 hours a day, 7 days a week and will respond to all data-related requests within 5 business days.

hibaj is committed to operating the platform in a way that respects player privacy at every step. All staff with access to personal data are subject to strict confidentiality obligations. hibaj regularly reviews its data practices to ensure they remain appropriate and proportionate to the services provided.

hibaj collects personal data that you provide directly to us and data that is generated automatically by your use of the platform. The categories of personal data we collect include:

• Identity data: full name, date of birth, gender and nationality, as provided during account registration. This data is required to verify your age and identity in compliance with our 21+ age requirement and KYC obligations.
• Contact data: your registered mobile number (used for OTP verification and account communications) and email address (if provided). hibaj uses your registered Bangladeshi mobile number as the primary channel for account security and support communications.
• Financial data: your bKash, Nagad, Rocket or bank account details used for deposits and withdrawals. hibaj stores only the minimum financial identifiers required to process transactions and does not store full payment credentials on its own servers.
• Transaction data: records of all deposits, withdrawals, bets placed, games played, bonuses claimed and account balance history. This data is retained to resolve disputes, comply with anti-money laundering obligations and audit platform fairness.
• Technical data: IP address, browser type, device type, operating system, screen resolution, session duration, and pages visited. This data is collected automatically to maintain platform security, detect fraud, and improve the player experience.
• Communications data: records of messages sent to or received from hibaj customer support, including live chat transcripts and email correspondence. These records are retained to verify dispute histories and improve support quality.

hibaj processes your personal data only for the specific, legitimate purposes set out below. We do not use your data for any purpose not listed in this table without first obtaining your explicit consent.

hibaj does not sell, rent or trade your personal data to any third party. We may share your data in strictly limited circumstances, and only where necessary to deliver the service or comply with legal obligations:

• Payment processors: hibaj shares the minimum transaction data required with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank and BRAC Bank solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own data protection obligations.
• Game technology providers: hibaj works with licensed game studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt and Spribe to deliver casino and crash game content. These providers may process limited technical data (such as session identifiers) to facilitate game delivery.
• Fraud prevention and security: hibaj may share data with fraud detection partners and cyber-security service providers where required to investigate suspected fraudulent activity, protect player accounts, or maintain platform integrity.
• Legal and regulatory disclosure: hibaj may be required to disclose personal data to relevant authorities, law enforcement agencies or regulatory bodies in response to a valid legal request, court order or to comply with applicable anti-money laundering obligations.
• Service providers: hibaj may engage trusted technology and infrastructure suppliers (such as cloud hosting and analytics providers) who process data on hibaj's behalf under strict data processing agreements. These processors are not permitted to use your data for their own purposes.

hibaj uses cookies and similar tracking technologies to operate the platform, maintain session security, and improve user experience. Cookies are small data files stored on your device when you visit the hibaj website. The types of cookies we use are:

• Essential cookies: required for the platform to function correctly — including session management, login authentication via OTP, and maintaining your account session between page loads. These cannot be disabled without disrupting basic platform functionality.
• Performance cookies: anonymised data collected about how players use the hibaj platform (pages visited, time on page, error reports) to identify technical issues and improve platform performance. No personally identifiable information is collected via performance cookies.
• Preference cookies: store your platform preferences such as language choice and display settings so that your preferences are remembered between sessions.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from logging in or using core platform features. hibaj does not use advertising cookies or third-party tracking pixels for marketing profiling.

hibaj retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our data retention periods are as follows:

• Account and identity data: retained for the duration of your active account, plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction data: retained for a minimum of 5 years from the date of the transaction to support audit trails, dispute resolution and regulatory compliance.
• Customer support records: retained for 2 years from the date of last contact, to support dispute resolution and quality assurance reviews.
• Technical and device data: retained for a rolling 12-month period and then automatically purged, unless retained as part of a specific fraud or security investigation.

As a player on the hibaj platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected]. hibaj will respond to all data rights requests within 5 business days.

• Right of access: you may request a copy of all personal data hibaj holds about you at any time. hibaj will provide this in a clear, readable format within 5 business days of the request.
• Right of correction: if any personal data hibaj holds about you is inaccurate or out of date, you have the right to request that we correct it promptly.
• Right of erasure: you may request that hibaj delete your personal data. hibaj will action erasure requests within 30 days of account closure, subject to retaining data where required by applicable law (for example, transaction records retained for anti-money laundering compliance).
• Right to restrict processing: you may ask hibaj to restrict the processing of your personal data in certain circumstances — for example, while a correction request is being reviewed.
• Right to withdraw consent: where hibaj processes your data on the basis of consent (for example, for promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

hibaj takes the security of your personal data seriously and has implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration or disclosure. Our security measures include:

• 256-bit SSL (TLS) encryption on all data transmissions between your device and hibaj servers, ensuring that your login credentials, payment details and session data cannot be intercepted in transit.
• OTP (one-time password) verification required for account login and every withdrawal request, adding a second layer of authentication beyond your password. OTPs are delivered to your registered Bangladeshi mobile number only.
• Access controls: internal access to player personal data is restricted on a strict need-to-know basis. Staff are granted only the minimum level of data access required to perform their role. All data access by staff is logged and subject to regular audit.
• Regular security reviews: hibaj's technical infrastructure undergoes regular security reviews and vulnerability assessments to identify and address potential weaknesses before they can be exploited.

The hibaj platform is strictly restricted to individuals aged 21 years and above. hibaj does not knowingly collect personal data from anyone under the age of 21. If you are a parent or guardian and believe that your child has created an account on hibaj or provided personal data to hibaj without your knowledge, please contact us immediately at [email protected]. Upon receiving a verified report that an account belongs to a minor, hibaj will:

• Immediately suspend the account and freeze all account balances pending investigation.
• Delete all personal data associated with the account within 72 hours of the verified report, except where retention is required to comply with legal obligations.
• Return any deposits made to the payment method from which they originated, subject to verification that the payment method belongs to the parent or guardian making the report.
• Report the incident to relevant authorities if the circumstances indicate a deliberate attempt to circumvent the age verification process.

hibaj applies strict 21+ age verification at registration and during KYC checks. We are committed to preventing underage access to the platform and take all reports of potential underage accounts seriously.

The hibaj platform may contain references to third-party services such as bKash, Nagad and game providers. hibaj is not responsible for the privacy practices or content of any third-party website or service. When you interact with a third-party payment provider to complete a transaction, you are subject to that provider's own privacy policy and terms of service. hibaj encourages all players to review the privacy policies of any third-party services they interact with in connection with their hibaj account.

hibaj reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will notify active players via their registered contact details and publish the updated Policy on this page with a revised effective date. The categories of changes that hibaj considers material include:

• Changes to the categories of personal data we collect or the purposes for which we use them.
• Changes to the third parties with whom we share personal data, where those changes are not covered by an existing disclosure in this Policy.
• Changes to data retention periods that result in personal data being kept for longer than previously stated.

This Privacy Policy is governed by and construed in accordance with applicable law. Any dispute arising from this Policy or hibaj's processing of your personal data that cannot be resolved through direct communication with our support team will be subject to the dispute resolution process set out in the hibaj Terms and Conditions, available at /terms-conditions. By using the hibaj platform, players in Bangladesh agree that any unresolved data dispute will be handled through good-faith negotiation before any formal legal proceedings are initiated.

If you have any questions, concerns or requests relating to this Privacy Policy or to hibaj's handling of your personal data, please contact our dedicated support team. We take all data privacy enquiries seriously and aim to resolve every request promptly and transparently.

Email: [email protected]

Response time: within 5 business days for data rights requests. Live chat available 24/7 for general support queries.