hibazie Privacy Policy

This Privacy Policy ("Policy") describes how hibazie ("hibazie", "we", "us", or "our") collects, uses, stores, and discloses personal information about players and visitors ("you" or "your") who access and use the hibazie platform at hibazie.net. By registering an account or using any feature of the hibazie platform, you confirm that you have read this Policy and consent to the data processing activities described herein. If you do not agree with this Policy, you must not use the hibazie platform.

This Policy applies to all personal data processed by hibazie in connection with the hibazie.net platform, including information collected via the website, via mobile devices, and via communications with our support team. It does not apply to third-party websites that may be linked to or from hibazie.net.

1. Data We Collect

hibazie collects personal data in three primary ways: data you provide directly when registering or using the platform, data generated automatically by your device and browser as you use the service, and data received from third-party payment and identity verification providers. The categories of personal data we collect are set out below.

1.1 Registration Data

When you create a hibazie account, we collect:

• Your full legal name
• Your date of birth (to verify that you are 18 years of age or older)
• Your email address
• Your Bangladeshi mobile phone number
• Your username and encrypted password
• Your preferred currency (Bangladeshi Taka / ৳)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer programme, we may collect:

• A copy of your National Identity Card (NID) issued by the Bangladesh Election Commission
• A copy of your valid passport or driving licence
• Proof of your residential address (e.g., a utility bill or bank statement dated within 90 days)
• A selfie photograph for facial matching purposes, where required by our verification provider

1.3 Financial Data

To process deposits and withdrawals, we collect:

• Your mobile wallet account number (bKash, Nagad, Rocket, or Upay)
• Your bank account details where bank transfer is used (account name, bank name, branch)
• Transaction reference numbers and timestamps
• Deposit and withdrawal amounts in Bangladeshi Taka (৳)

hibazie does not store full payment card numbers. Any card-related processing is handled exclusively by our PCI-DSS compliant payment partners.

1.4 Technical and Usage Data

When you visit hibazie.net, we automatically collect technical data via your browser and device, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths
• Game sessions played, bet amounts, and wagering activity
• Login timestamps and session duration
• Referral source (the URL from which you arrived at hibazie.net)

1.5 Communications Data

When you contact the hibazie support team via email or live chat, we retain records of those communications, including the content of your messages, the date and time of contact, and any attachments or screenshots you provide. This data is used to resolve your query and to improve our support quality.

1.6 Responsible Gaming Data

If you use hibazie's responsible gaming tools — including deposit limits, session time limits, or self-exclusion requests — we record the settings you apply and the dates on which they take effect. This data is essential to honouring your responsible gaming preferences and cannot be deleted during any active exclusion period.

2. How We Use Your Data

hibazie processes your personal data only for specific, documented purposes. The table below sets out each processing purpose, the category of data used, and the legal basis for that processing.

Purpose	Data Categories Used	Legal Basis
Account registration and authentication	Registration data	Contractual necessity
Age and identity verification (KYC)	KYC data, registration data	Legal obligation
Processing deposits and withdrawals	Financial data, registration data	Contractual necessity
Fraud detection and prevention	Technical data, financial data, KYC data	Legitimate interest / legal obligation
Anti-money laundering (AML) compliance	Financial data, KYC data, usage data	Legal obligation
Game provision and platform operation	Usage data, registration data	Contractual necessity
Customer support	Communications data, registration data	Contractual necessity
Responsible gaming interventions	Responsible gaming data, usage data	Legal obligation / legitimate interest
Platform analytics and improvement	Technical data, usage data	Legitimate interest
Promotional communications (with consent)	Registration data, usage data	Consent

2.1 Marketing Communications

hibazie will only send you promotional emails, SMS messages, or in-platform notifications about bonuses and offers if you have expressly opted in to receive such communications at the time of registration, or subsequently through your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard or by contacting [email protected]. Withdrawal of marketing consent does not affect the processing of your data for other purposes (e.g., transaction processing or KYC).

2.2 Automated Decision-Making

hibazie may use automated systems to flag accounts for review where unusual activity — such as abnormal deposit patterns, rapid bonus claiming, or device fingerprint mismatches — is detected. These automated flags trigger a manual review by a member of the hibazie compliance team; no account action (suspension, withdrawal hold, or bonus cancellation) is taken based solely on automated processing without human review. You have the right to request human review of any automated decision that affects your account.

3. Data Sharing & Disclosure

hibazie does not sell, rent, or trade your personal data. We share your data with third parties only in the limited circumstances described in this section.

3.1 Payment Service Providers

To process your deposits and withdrawals, hibazie shares the minimum necessary financial data with our payment partners, including bKash, Nagad, Rocket, Upay, and our banking partners (BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank). These partners process your data only to complete the requested transaction and are contractually prohibited from using your data for any other purpose.

3.2 Identity Verification Providers

hibazie uses third-party identity verification providers to perform KYC checks. These providers process your KYC documents (NID, passport, selfie) on our behalf under strict data processing agreements. Verified identity data is returned to hibazie and stored securely. Your documents are not retained by our verification partners beyond the period required to complete the verification check.

3.3 Game Technology Providers

Games available on the hibazie platform are supplied by third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive session data (player ID, stake amounts, game outcomes) as part of normal game operation. This data is necessary to determine game results and calculate winnings. Game providers are bound by data processing agreements and may not use this data for purposes beyond game delivery.

3.4 Legal and Regulatory Disclosure

hibazie may disclose your personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by applicable law, court order, or in connection with legal proceedings. hibazie will notify you of such disclosure where it is legally permitted to do so.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of hibazie's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered on your account before your data is transferred and before it becomes subject to a different privacy policy.

4. Cookies & Tracking

hibazie uses cookies and similar tracking technologies on hibazie.net to ensure the platform functions correctly, to remember your preferences, and to analyse how players use the site. This section explains the types of cookies we use and how you can manage them.

4.1 Essential Cookies

Essential cookies are required for the hibazie platform to operate. They enable core functions such as user authentication, session management, and fraud prevention. These cookies cannot be disabled without breaking the functionality of the platform. They do not track you across other websites and are not used for marketing purposes.

4.2 Analytics Cookies

hibazie uses analytics cookies to understand how players navigate the platform — which pages are visited most frequently, how long sessions last, and where users encounter difficulties. This data is aggregated and anonymised wherever possible. Analytics cookies help us improve the platform experience for all players. You may opt out of analytics cookies via your browser settings.

4.3 Preference Cookies

Preference cookies remember choices you have made on the platform, such as your preferred language settings or display preferences. These cookies improve your experience by reducing the need to re-enter preferences on each visit.

4.4 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear cookies on exit, or be notified before a cookie is stored. Please note that disabling essential cookies will impair the functionality of hibazie.net and may prevent you from logging in or processing transactions. Instructions for managing cookies in popular browsers:

• Chrome: Settings → Privacy and Security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions → Cookies and site data

5. Data Retention

hibazie retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods applied to different categories of data are summarised below.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years	Legal and regulatory obligation
KYC / identity documents	Duration of account + 5 years	AML compliance
Financial transaction records	Duration of account + 7 years	Financial record-keeping obligations
Game session data	Duration of account + 3 years	Dispute resolution, fair play auditing
Support communications	3 years from last contact	Quality assurance, dispute resolution
Self-exclusion records	Minimum 5 years from exclusion date	Responsible gaming compliance
Analytics / technical logs	13 months	Platform performance monitoring
Marketing consent records	Until consent withdrawn + 3 years	Proof of consent

When the applicable retention period expires, hibazie will securely delete or anonymise your personal data so that it can no longer be attributed to you. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

6. Data Security

hibazie takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect your information against unauthorised access, loss, destruction, or disclosure.

6.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and hibazie.net is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously.
• At-Rest Encryption: Personal data stored in hibazie's databases is encrypted using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a bcrypt algorithm with a per-user salt before storage.
• Two-Factor Authentication (2FA): hibazie supports 2FA for player accounts. We strongly recommend all players enable 2FA via their account security settings.
• Firewall and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious activity around the clock.

6.2 Organisational Security Measures

• Access to personal data is restricted to hibazie employees and contractors whose role requires it, on a strict need-to-know basis.
• All personnel with access to personal data undergo background checks and regular data security training.
• Third-party vendors who process data on hibazie's behalf are subject to data processing agreements that require them to maintain equivalent security standards.
• hibazie conducts periodic internal audits of its data processing activities and security controls.

6.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, hibazie will notify affected players via the email address registered on their account within 72 hours of becoming aware of the breach, where technically feasible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps hibazie has taken or will take to address it.

7. Your Data Rights

As a player on the hibazie platform, you have a number of rights with respect to your personal data. hibazie is committed to honouring these rights promptly and without undue restriction.

7.1 How to Exercise Your Rights

To exercise any of the rights listed above, please send a written request to [email protected] with the subject line "Data Rights Request". Your request should include your full name, your registered email address, and a description of the right you wish to exercise. hibazie will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

7.2 Limitations on Erasure

The right to erasure is not absolute. hibazie may be required to retain certain categories of your personal data (such as KYC documents and financial transaction records) for defined periods in order to comply with anti-money laundering laws and other legal obligations. Where a deletion request cannot be fulfilled in full due to such obligations, hibazie will inform you of the specific data categories that must be retained and the legal basis for their retention, and will delete all other personal data to which the retention obligation does not apply.

8. Contact & Policy Updates

8.1 Data Controller

hibazie is the data controller for all personal data processed in connection with the hibazie.net platform. If you have any questions about this Privacy Policy, or about how hibazie handles your personal data, please contact our data protection team:

• Email: [email protected] (subject: "Privacy Enquiry")
• Platform: hibazie.net
• Market: Bangladesh (BDT / ৳)

8.2 Policy Updates

hibazie reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will update the effective date at the top of this page and, where required, notify you by email at the address registered on your account. We encourage you to review this Policy periodically. Your continued use of the hibazie platform after any update is published constitutes your acceptance of the revised Policy.