hbahe Privacy Policy

1 Introduction

hbahe ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all individuals who use hbahe.net. This Privacy Policy sets out a transparent account of how we collect, use, store, share, and protect your personal information when you visit our website, register an account, make a deposit or withdrawal, place a bet, or otherwise interact with the hbahe platform.

hbahe operates as an offshore online casino and cricket betting platform serving English-speaking players in Bangladesh and other markets. Our platform supports transactions in Bangladeshi Taka (BDT) and is designed for players aged 18 and above only. All personal data processed by hbahe is handled with strict confidentiality and in line with the data protection principles described in this policy.

This policy should be read alongside hbahe's Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to how your account information is managed. If you have any questions about this policy or how your data is used, please contact us at [email protected] before registering or continuing to use the platform.

2 Data We Collect

hbahe collects personal data through multiple channels: directly from you when you register or interact with the platform, automatically as you browse and use the site, and from trusted third-party partners such as payment processors and fraud detection services. The categories of data we collect are as follows:

2.1 Registration and Identity Data

• Full legal name (as per government-issued ID)
• Date of birth (to verify 18+ age requirement)
• Residential address (including city, district, postal code)
• Email address
• Mobile phone number
• Username and password (password stored in hashed form only)
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence where applicable)
• Proof of address documents (utility bill, bank statement, or equivalent)
• Payment method verification documents (where required for withdrawal processing)

2.3 Financial and Transaction Data

• Deposit and withdrawal amounts in BDT
• Payment method identifiers (e.g., bKash account number, Nagad number, Rocket number, bank account details — stored in partial or tokenised form where possible)
• Transaction history (dates, amounts, payment methods, status)
• Bonus and promotional activity records

2.4 Gaming and Betting Activity Data

• Game session records (games played, stakes, outcomes, session duration)
• Sports betting records (markets selected, stake amounts, odds, outcomes)
• Bonus wagering progress and history
• Responsible gaming settings (deposit limits, cool-off periods, self-exclusion status)

2.5 Technical and Device Data

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser version
• Session timestamps and login history
• Referring URL and on-site navigation path
• Cookie identifiers (see Section 5 for full cookie details)

2.6 Communications Data

• Live chat transcripts between you and hbahe support
• Email correspondence with hbahe support or compliance teams
• Feedback, complaint records, and dispute submissions

3 How We Use Your Data

hbahe uses the personal data we collect for the following purposes. We process your data only where we have a lawful basis to do so, which may be contractual necessity (to deliver our services), legal obligation (to comply with KYC and anti-money-laundering requirements), or legitimate interest (to prevent fraud and maintain platform security).

Purpose	Data Used	Lawful Basis
Account registration and management	Registration and identity data	Contractual necessity
Age and identity verification (KYC)	KYC documents, date of birth	Legal obligation
Processing deposits and withdrawals in BDT	Financial and transaction data	Contractual necessity
Delivering casino games and sports betting services	Gaming activity data	Contractual necessity
Fraud prevention and security monitoring	Technical data, transaction data	Legitimate interest
Responsible gaming monitoring and intervention	Gaming data, responsible gaming settings	Legal obligation / legitimate interest
Customer support and dispute resolution	Communications data, account data	Contractual necessity
Platform analytics and performance improvement	Technical data, navigation data	Legitimate interest
Sending account-related notifications (deposits confirmed, withdrawal processed, bonus credited)	Email address, transaction data	Contractual necessity
Sending promotional communications (where you have opted in)	Email address, gaming preferences	Consent

hbahe does not use your personal data for any purpose not listed above without first providing you with notice and, where required by applicable law, obtaining your consent. You may withdraw consent for promotional communications at any time by updating your account preferences or by contacting [email protected].

4 Data Sharing & Disclosure

hbahe does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share your data only where it is necessary to deliver our services, meet legal obligations, or protect the security of the platform. The categories of recipients with whom we may share your data are described below:

4.1 Payment Service Providers

To process your deposits and withdrawals in BDT, hbahe shares relevant transaction data with your chosen payment provider — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. The data shared is limited to what each provider requires to authenticate and complete the transaction. Each payment provider operates under its own privacy policy and data protection obligations.

4.2 Game and Technology Providers

hbahe licenses casino games from third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and Habanero. These providers may receive session identifiers and gameplay data necessary to deliver their games. They do not receive your full identity data unless required for regulatory compliance purposes specific to their operating licences.

4.3 Identity Verification and Fraud Prevention Services

hbahe uses third-party KYC and fraud detection platforms to verify identity documents, screen players against sanctions and PEP (Politically Exposed Person) lists, and detect unusual account or transaction patterns. These services process the minimum data necessary for their function and are bound by data processing agreements with hbahe.

4.4 Legal and Regulatory Authorities

hbahe may disclose personal data to law enforcement agencies, regulatory bodies, tax authorities, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of hbahe, its players, or the public. hbahe will notify affected users of such disclosure where permitted by law.

4.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of hbahe assets, personal data held by hbahe may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address in advance of any such transfer, and the acquirer will be required to honour this Privacy Policy or provide equivalent protection.

5 Cookies & Tracking

hbahe uses cookies and similar tracking technologies on hbahe.net to provide a functional, secure, and personalised experience. A cookie is a small text file placed on your device by the website when you visit. The following table describes the categories of cookies used on hbahe.net:

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Session management, login authentication, security tokens, load balancing. These cookies are essential for the platform to function and cannot be disabled without breaking core functionality.	No
Performance / Analytics	Anonymous usage statistics (pages visited, session duration, error tracking) used to improve platform performance. hbahe uses first-party analytics only — no data is sent to third-party advertising networks.	Yes
Functional	Remembers your language preference, responsible gaming settings, and last-visited game category to personalise your experience on return visits.	Yes
Fraud Prevention	Device fingerprinting and behavioural signals used to detect and prevent account fraud, duplicate account creation, and bonus abuse. These signals are processed internally and not shared with advertising partners.	No

hbahe does not use third-party advertising cookies, retargeting pixels, social media tracking widgets, or any cross-site tracking technology that would share your browsing behaviour with external advertising platforms.

You may manage cookie preferences (for non-essential categories) via your browser settings. Most browsers allow you to block or delete cookies through their privacy settings menu. Please note that disabling functional or performance cookies may affect your experience on hbahe.net but will not prevent you from accessing core account features.

6 Data Retention

hbahe retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply:

• Active account data (registration details, transaction history, game records): Retained for the lifetime of your account and for a minimum of 5 years following account closure, in line with standard financial record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years following account closure, as required for anti-money-laundering compliance.
• Customer support communications (live chat transcripts, email correspondence): Retained for 3 years from the date of the last communication, for dispute resolution and audit purposes.
• Technical and device logs (IP addresses, session logs): Retained for 12 months from the date of recording, for fraud investigation and security purposes.
• Marketing consent records: Retained for the period during which consent is active, plus 3 years following withdrawal of consent, as evidence of consent management.

Upon expiry of the applicable retention period, hbahe will securely delete or anonymise the relevant data. Where anonymisation is not technically feasible (e.g., structured financial records), data will be archived in a form that cannot be linked back to you as an individual.

7 Your Privacy Rights

As a player on hbahe.net, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] from your registered email address. hbahe will respond within 30 days of receiving a valid request. We may ask you to verify your identity before processing a rights request to prevent unauthorised access to your data.

8 Data Security

hbahe takes the security of your personal data seriously and applies a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and hbahe.net is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols. You can verify the secure connection by the padlock symbol displayed in your browser's address bar.
• Password Security: User passwords are never stored in plain text. They are processed through a one-way cryptographic hash function before storage, meaning that even hbahe staff cannot read your password. If you forget your password, it must be reset — it cannot be retrieved.
• Access Controls: Access to personal data within hbahe's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose roles require access to specific data categories (e.g., the KYC team, the finance team, the support team) are granted that access. All internal data access is logged and audited.
• Two-Factor Authentication (2FA): hbahe supports optional two-factor authentication for player accounts. We strongly recommend enabling 2FA to add a second layer of security to your account login.
• Regular Security Audits: hbahe conducts periodic internal security reviews and engages third-party security professionals to perform vulnerability assessments and penetration testing of our platform infrastructure.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, hbahe will notify affected individuals promptly via their registered email address and will take immediate steps to contain the breach and assess its impact. A post-incident report will be shared with affected users where appropriate.

While hbahe implements robust security measures, no platform can guarantee absolute security. You play an important role in keeping your account secure by choosing a strong, unique password, enabling 2FA, and never sharing your login credentials with any third party. If you suspect your account has been compromised, contact hbahe support immediately via live chat or email.

9 Protection of Minors

hbahe is strictly an adult platform. All services offered on hbahe.net — including casino games, slots, live dealer tables, cricket betting, and sports wagering — are intended exclusively for individuals who are 18 years of age or older. hbahe takes the protection of minors extremely seriously and implements the following measures to prevent underage access:

• Mandatory Age Declaration: All players must confirm they are aged 18 or above during the registration process. Providing a false age declaration is a breach of hbahe's Terms & Conditions and will result in immediate account closure and forfeiture of any funds held in the account.
• KYC Age Verification: hbahe requires all players to complete identity verification (KYC) before processing withdrawals or granting access to certain high-value features. KYC includes verification of date of birth against a government-issued photo ID. Accounts where KYC cannot confirm 18+ age will be suspended pending resolution.
• Deletion of Minor's Data: If hbahe identifies or is notified that personal data belonging to a person under the age of 18 has been collected on our platform — whether through registration, gameplay, or any other interaction — we will delete that data immediately, close the associated account without delay, and return any deposited funds to their source payment method where technically possible.
• Parental Controls: hbahe encourages parents and guardians to make use of third-party parental control software to restrict access to gambling websites on devices used by minors. Tools such as Net Nanny, Kaspersky Safe Kids, and similar products can help restrict access at the device level. hbahe does not operate a parental control system directly but supports these external solutions.

If you believe a minor has registered or is using an account on hbahe.net, please report it immediately to [email protected] so that our compliance team can investigate and act without delay.

10 Policy Updates

hbahe reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this policy — changes that affect how we collect, use, or share your personal data — we will notify you in advance via your registered email address and by posting a prominent notice on hbahe.net at least 14 days before the changes take effect.

Minor or administrative updates (such as correcting typographical errors, clarifying existing language, or updating contact details) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision, whether material or minor.

Your continued use of hbahe.net after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with a material change, you should close your account before the change takes effect and contact support at [email protected] to exercise any relevant data rights.

Previous versions of this Privacy Policy are available upon request by contacting hbahe support. We retain archived versions for a minimum of 3 years from the date they were superseded.

11 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how hbahe processes your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our compliance and data protection team and will receive a substantive response within 5 business days.

• Email: [email protected]
• Live Chat: Available 24/7 directly on hbahe.net
• Response Time: Under 2 minutes via live chat; under 4 hours via email
• Support Language: English
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

When submitting a privacy-related request or complaint, please include your registered email address and a clear description of your request so that our team can locate your account and respond accurately. For data subject rights requests (access, erasure, rectification, portability), please submit from your registered email address to assist us in verifying your identity securely.