Privacy Policy — hbeje
How We Protect Your Personal Data
hbeje is committed to safeguarding the privacy of every player who uses our platform. This Privacy Policy explains in clear, plain English exactly what personal data we collect, why we collect it, how we use it, and the rights you hold over your own information.
About This Policy: This Privacy Policy applies to all personal data collected by hbeje through the hbeje.com website, mobile experience, and associated services. By creating an account and using the hbeje platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please do not create an account or continue using the service. hbeje reserves the right to update this Privacy Policy; the current version will always be published on this page with a revised effective date.
SSL-Encrypted Data Transmission
Every interaction between your device and hbeje's servers — including hbeje Login sessions, deposit submissions, and account updates — is protected by industry-standard SSL encryption. Your personal data is never transmitted in plain text across any network.
No Sale of Personal Data
hbeje does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing networks. Your information is used exclusively for the purposes described in this Privacy Policy and is never monetised independently of the services you use.
Minimal Data Collection
hbeje collects only the data that is strictly necessary to operate the platform, verify player identity, process transactions, and meet legal obligations. We do not collect data speculatively. If a piece of information is not needed for a defined purpose, we do not request or store it.
Controlled Third-Party Access
Where hbeje works with third-party service providers — such as payment processors like bKash, Nagad, and Rocket, or game providers like Pragmatic Play and Evolution Gaming — those partners receive only the minimum data required to perform their specific service. All third parties are bound by confidentiality obligations.
Your Data, Your Control
Registered hbeje players have the right to access, correct, and request deletion of their personal data at any time. You may also object to certain forms of data processing or request that we restrict how your data is used. Requests can be submitted to [email protected] and will be acknowledged within 48 hours.
Defined Retention Periods
hbeje does not retain personal data indefinitely. Retention periods are tied to the purpose for which data was collected — transactional records are retained for seven years to satisfy financial compliance obligations, while marketing preferences and browsing data are held for shorter periods and may be deleted upon request.
Data We Collect
hbeje collects personal data through several channels: directly from you when you register an account, during your ongoing use of the platform, and in limited circumstances from trusted third-party sources such as identity verification providers. The categories of personal data we collect are described in the table below.
| Category | Specific Data Points | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, National ID or passport number, photograph (where submitted for KYC) | Provided by you at registration or during KYC verification |
| Contact Data | Mobile phone number, email address | Provided by you at registration |
| Financial Data | bKash / Nagad / Rocket mobile wallet numbers, bank account details (where applicable), transaction history, deposit and withdrawal amounts in BDT (৳) | Provided by you when making transactions; recorded automatically by the platform |
| Account Activity Data | Login timestamps, session duration, games played, wagers placed, bet history, bonus usage, responsible gaming settings | Generated automatically through your use of the platform |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, referring URL | Collected automatically via server logs and cookies |
| Communications Data | Support ticket content, live chat transcripts, email correspondence with hbeje support team | Generated when you contact hbeje's customer support |
| Marketing Preferences | Opt-in or opt-out status for promotional SMS, email, and platform notifications | Set by you during registration or updated in Account settings |
1.1 Data We Do Not Collect
hbeje does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes (other than photographs submitted voluntarily for KYC), or data concerning health (except where a player voluntarily discloses a gambling-related health concern to our responsible gaming team). hbeje does not knowingly collect any personal data from individuals under the age of 18.
1.2 Data from Third-Party Sources
In limited circumstances, hbeje may receive personal data about you from third-party sources, including fraud prevention agencies, identity verification service providers, and publicly available sources such as sanctions lists. This data is used solely to verify your identity, comply with legal obligations, and protect the integrity of the hbeje platform.
How We Use Your Data
hbeje processes your personal data only where there is a lawful basis for doing so. The primary lawful bases we rely on are: (a) performance of a contract — processing necessary to provide you with the hbeje service; (b) legal obligation — processing required to comply with applicable laws; and (c) legitimate interests — processing that serves a genuine business need that does not override your rights as a data subject.
2.1 Service Delivery
The majority of data processing carried out by hbeje is necessary to deliver the platform's core services. This includes creating and managing your Account, processing deposits and withdrawals via bKash, Nagad, Rocket, and other payment channels, settling bets and crediting winnings, providing customer support, and sending transactional notifications (such as deposit confirmations and withdrawal status updates) to your registered mobile number or email address.
2.2 Identity Verification and Fraud Prevention
hbeje uses identity data and financial data to carry out Know Your Customer (KYC) verification, to detect and prevent fraud, money laundering, and other financial crimes, and to ensure that the platform is not used by individuals who are underage or subject to self-exclusion. These activities are partly required by law and partly serve hbeje's legitimate interest in maintaining a secure and trustworthy platform for all players.
2.3 Responsible Gaming Monitoring
Account activity data — including betting patterns, session frequency, deposit levels, and use of responsible gaming tools — is monitored by hbeje to identify players who may be exhibiting signs of problem gambling. Where concerns are identified, hbeje's responsible gaming team may make proactive contact with the player. This processing serves both a contractual and a legitimate interest basis and is described in more detail on our Responsible Gaming page.
2.4 Marketing Communications
Where you have opted in to receive promotional communications, hbeje may use your contact data to send you information about bonuses, promotions, new games, and seasonal offers relevant to the Bangladesh market — including BPL and IPL cricket promotions, Eid special offers, and Pohela Boishakh campaigns. You may withdraw your marketing consent at any time by updating your Account notification settings or by contacting [email protected]. Withdrawal of marketing consent does not affect hbeje's ability to send you transactional communications.
2.5 Platform Improvement and Analytics
Technical data and account activity data are used in aggregate and anonymised form to analyse platform performance, identify technical issues, improve the user experience, and develop new features. Where analytics are conducted on individually identifiable data, this is done only where a legitimate interest basis applies and appropriate safeguards are in place.
No Automated Decision-Making: hbeje does not use fully automated decision-making processes that produce legal or similarly significant effects on individual players without human oversight. Where automated systems flag an account for review (for example, fraud detection or responsible gaming monitoring), a member of hbeje's team will review the case before any consequential action — such as account suspension or withdrawal restriction — is taken.
Data Sharing & Third Parties
hbeje does not sell or rent your personal data to any third party. We share your data only in the specific, limited circumstances described below, and only to the extent necessary for the purpose identified.
3.1 Payment Service Providers
To process deposits and withdrawals, hbeje shares the minimum necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers process your payment information under their own privacy policies and are independently responsible for the security of data within their systems. hbeje is not responsible for the privacy practices of third-party payment providers once data has been transmitted to them for transaction processing purposes.
3.2 Game Providers
Games hosted on the hbeje platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To enable game play and correct bet settlement, hbeje shares a unique player identifier and session token with the relevant game provider. hbeje does not share your full name, contact details, or financial data with game providers. Game providers use this session data solely to render the game and report outcomes back to hbeje.
3.3 Identity Verification Providers
Where KYC verification is required, hbeje may share identity documents and personal data with specialist third-party verification services. These providers are contractually bound to use your data only for the purpose of verifying your identity on behalf of hbeje and must destroy or return the data once verification is complete.
3.4 Legal and Regulatory Disclosure
hbeje may be required by law to disclose personal data to government authorities, law enforcement agencies, or regulatory bodies in response to a lawful request, court order, or legal process. In such cases, hbeje will disclose only the data that is specifically required by the legal obligation and will, where legally permitted, notify the affected player that their data has been requested.
3.5 Business Transfers
In the event that hbeje undergoes a merger, acquisition, or sale of all or part of its assets, personal data held by hbeje may be transferred to the acquiring entity as part of that transaction. In such circumstances, hbeje will take reasonable steps to ensure that the privacy rights described in this Policy continue to apply to your data following the transfer, and affected players will be notified in advance wherever practicable.
Cookies & Tracking Technologies
4.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language, login session status, and platform settings — so that you do not have to re-enter that information on each visit. hbeje uses cookies and similar technologies (including local storage and session storage) to operate the platform effectively and to improve your experience.
4.2 Types of Cookies Used by hbeje
| Cookie Type | Purpose | Retention Period |
|---|---|---|
| Strictly Necessary | Essential for the platform to function. Maintains your login session, preserves security tokens, and enables the hbeje Login process to work correctly. | Session / up to 24 hours |
| Functional | Remembers your platform preferences such as notification settings and responsible gaming limits so they persist between sessions. | Up to 90 days |
| Analytics | Collects anonymised data about how players navigate the hbeje platform — pages visited, features used, and error occurrences — to help us improve the experience. | Up to 12 months |
| Fraud Detection | Identifies unusual patterns in device and browser behaviour to protect your account from unauthorised access and detect potential fraud. | Up to 6 months |
4.3 Managing Cookies
You may control cookie settings through your browser preferences. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Please note that disabling strictly necessary cookies will prevent you from logging in to your hbeje account and using core platform features. Disabling functional or analytics cookies will not prevent you from using the platform but may result in a reduced personalisation experience. hbeje does not use third-party advertising cookies or behavioural profiling cookies for the purpose of serving ads on external websites.
Data Retention & Storage
5.1 Retention Principles
hbeje retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. When data is no longer needed for any active purpose and no legal retention requirement applies, hbeje will securely delete or anonymise it in accordance with our internal data lifecycle procedures.
5.2 Specific Retention Periods
- Account and identity data for active accounts: retained for the lifetime of the account plus five years following permanent account closure.
- Financial transaction records (deposits, withdrawals, bet history): retained for seven years from the date of the transaction to comply with financial record-keeping obligations.
- KYC verification documents: retained for five years from the date of verification or from the date of account closure, whichever is later.
- Customer support correspondence: retained for three years from the date of the last interaction in the relevant support thread.
- Marketing preference records: retained for two years from the date of last update or until the account is closed.
- Analytics and technical data: retained in anonymised or aggregated form for up to 12 months; raw session logs are deleted within 90 days.
5.3 Data Storage Location
hbeje stores personal data on servers located within secure data centre facilities. All stored data is protected by access controls, encryption at rest, and regular security audits. hbeje's technical team conducts periodic reviews of data storage practices to ensure that retention limits are applied consistently and that obsolete data is purged on schedule.
Self-Excluded Players: Where a player has requested self-exclusion through hbeje's responsible gaming programme, hbeje will retain sufficient identity data to enforce the exclusion and prevent re-registration for the duration of the self-exclusion period plus a minimum of five years thereafter. This retention is necessary to protect the player and is carried out under a legitimate interest and legal compliance basis.
Your Privacy Rights
As a player registered with hbeje, you hold a number of rights in relation to your personal data. hbeje is committed to facilitating the exercise of these rights promptly and without unnecessary obstacles. To exercise any of the rights described below, please contact [email protected] with the subject line "Privacy Rights Request" and include your registered mobile number or email address so that we can verify your identity before processing the request.
6.1 Right of Access
You have the right to request a copy of all personal data that hbeje holds about you. Upon a verified request, hbeje will provide a structured summary of your data within 30 days. Where the volume of data is large, we may request clarification of the specific categories or time periods you are interested in to ensure the response is useful and proportionate.
6.2 Right to Correction
If any personal data hbeje holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account data — such as your contact details — corrections can be made directly within your hbeje Account settings. For identity data that is tied to KYC verification, corrections may require submission of updated documentation.
6.3 Right to Erasure
You may request that hbeje delete your personal data where: the data is no longer necessary for the purpose for which it was collected; you withdraw consent on which processing is based; or you object to processing and there are no overriding legitimate grounds. Please note that hbeje is not obligated to erase data that must be retained to comply with a legal obligation (for example, financial transaction records required under applicable law) or to establish, exercise, or defend legal claims.
6.4 Right to Restrict Processing
You may request that hbeje restrict the processing of your personal data in certain circumstances — for example, while a correction request is being assessed, or where you have objected to processing and a determination is pending. Where processing is restricted, hbeje will continue to store your data but will not actively process it for any purpose other than storage.
6.5 Right to Object to Marketing
You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, hbeje will cease all marketing communications to the relevant contact details immediately. Opting out of marketing will not affect the delivery of transactional or service-related communications that are necessary for the operation of your account.
6.6 Response Timelines
hbeje will acknowledge all privacy rights requests within 48 hours of receipt and will aim to resolve them fully within 30 calendar days. Where a request is complex or involves a large volume of data, hbeje may extend this period by a further 30 days and will notify you of the extension and the reason for it in advance.
Data Security Measures
7.1 Technical Safeguards
hbeje implements a multi-layered approach to data security. All data transmitted between your device and hbeje's servers is protected by SSL/TLS encryption. Stored data — including financial records and identity documents — is encrypted at rest using industry-standard encryption algorithms. Access to personal data within hbeje's internal systems is restricted on a need-to-know basis, enforced through role-based access controls and multi-factor authentication for staff with administrative privileges.
7.2 Operational Security
hbeje conducts regular internal security reviews and periodic third-party penetration testing to identify and remediate vulnerabilities before they can be exploited. All staff who have access to personal data receive data protection training as part of their onboarding and on an annual basis thereafter. hbeje maintains an incident response plan that is tested and updated regularly to ensure a rapid and effective response in the event of any security breach.
7.3 What You Can Do to Stay Secure
While hbeje takes extensive measures to protect your data at the platform level, the security of your hbeje account also depends on actions you take. We strongly recommend the following practices:
- Use a strong, unique password for your hbeje Login that you do not use on any other website or application.
- Never share your hbeje Login credentials with any other person, including anyone claiming to be an hbeje employee — hbeje staff will never ask for your password.
- Log out of your hbeje account at the end of each session, particularly if you are using a shared or public device.
- Keep the mobile number and email address associated with your hbeje account current so that security notifications reach you promptly.
- Contact [email protected] immediately if you suspect that your account has been accessed without your authorisation.
7.4 Data Breach Notification
In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of affected players, hbeje will take immediate steps to contain the breach and assess its scope. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their rights, with clear guidance on the steps they should take to protect themselves. hbeje will document all data breaches, including those that do not trigger individual notification obligations, as part of its ongoing data governance records.
Policy Updates & Contact
8.1 Updates to This Privacy Policy
hbeje reviews this Privacy Policy periodically and will update it when necessary to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, hbeje will notify registered players via the email address or mobile number on file at least 14 days before the updated policy takes effect. The current effective version will always be available on this page, identified by the effective date shown at the top of the document. Your continued use of the hbeje platform after the effective date of any updated policy constitutes your acceptance of the revised terms.
8.2 Contact for Privacy Matters
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about the way hbeje handles your personal data, please contact our support team by sending an email to [email protected] with the subject line "Privacy Enquiry". Please include your registered mobile number or the email address associated with your hbeje account so that we can verify your identity and respond efficiently. All privacy enquiries are handled confidentially.
8.3 Relationship to Other Policies
This Privacy Policy should be read alongside hbeje's Terms & Conditions and Responsible Gaming policy, which together form the complete framework governing your relationship with the hbeje platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy-specific matter, this Privacy Policy shall prevail.
Your Privacy Matters to hbeje: hbeje is committed to being transparent about how we handle your personal data and to giving you meaningful control over your information. We believe that responsible data stewardship is as important as responsible gaming — both reflect our commitment to operating a platform that Bangladeshi players can trust. If you ever have doubts or concerns about your data privacy on hbeje, please reach out to us directly. We are here to help.
Have Questions About Your Privacy?
Our support team is available around the clock to answer any questions about your personal data. You can also explore our FAQ, review our Terms & Conditions, or head straight to the hbeje platform.