Privacy Policy

1. Introduction

habaji ("habaji", "We", "Us", "Our") operates the online gambling and sports betting platform accessible at habaji.club. In the course of providing our services — including cricket betting, live casino games, slot games, crash games, and payment processing in Bangladeshi Taka — habaji collects and processes personal data about the individuals who use our platform ("You", "Player", "User").

This Privacy Policy sets out, in plain English, precisely what personal data habaji collects, the purposes for which that data is processed, the legal basis on which processing is conducted, the circumstances in which habaji may share your data with third parties, how long habaji retains your data, and the rights available to you in relation to your personal data.

habaji takes the security and privacy of player data seriously. We apply industry-standard encryption, access controls, and data minimisation practices across our platform. We do not sell personal data to third parties, and we do not use personal data for purposes beyond those described in this policy without obtaining your prior consent.

2. Data We Collect

habaji collects the following categories of personal data from players and prospective players:

habaji operates a principle of data minimisation — we collect only the personal data that is strictly necessary for the stated purpose. We do not collect sensitive personal data (such as health data, religious beliefs, or political opinions) except where this arises incidentally in a support communication or responsible gaming context.

3. How We Collect Your Data

habaji collects personal data through the following channels:

• Direct Provision: Data you actively provide during account registration via the habaji Login page, during KYC verification, when making a deposit or withdrawal, or when contacting habaji support by email or live chat.
• Automated Technical Collection: Data collected automatically when you access habaji.club, including IP address, browser fingerprint, device identifiers, and session-level usage data via server logs and first-party cookies.
• Payment Processors: Transaction reference data passed to habaji by bKash, Nagad, Rocket, Upay, and card payment processors to confirm deposit and withdrawal completion.
• Game Providers: Round-level game data (stake, outcome, game ID, timestamp) transmitted to habaji by game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and Spribe for the purpose of account crediting and dispute resolution.
• KYC Partners: Identity verification results provided by third-party KYC service providers where habaji uses automated document verification tools.

4. How We Use Your Data

habaji uses your personal data for the following purposes:

• Account Management: To create, maintain, verify, and administer your habaji account, including processing your habaji Login credentials and account balance.
• Service Delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and local bank transfer; to settle bets and credit winnings; to deliver game content from our provider partners.
• Identity Verification: To conduct Know Your Customer (KYC) checks as required to confirm your age (18+), identity, and payment method ownership prior to processing withdrawals.
• Fraud Prevention & Security: To detect and investigate suspicious transactions, bonus abuse, multi-accounting, money laundering, and other prohibited conduct described in the habaji Terms and Conditions.
• Responsible Gaming: To monitor player behaviour patterns that may indicate problem gambling, to enforce self-exclusion requests, and to apply deposit limits and session time controls set by the player.
• Customer Support: To respond to your queries, process complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Marketing Communications: To send you promotional offers, bonus alerts, and seasonal promotions (such as BPL, Eid, or Pohela Boishakh specials) where you have given explicit consent to receive such communications. You may withdraw this consent at any time via your account dashboard or by contacting support.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the habaji platform, optimising game content, and enhancing the player experience.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and enforce our contractual rights under the habaji Terms and Conditions.

habaji does not use your personal data to make fully automated decisions that produce significant legal effects on you without providing a means for human review. Automated fraud detection flags are always subject to human investigation before account suspension is enacted.

5. Legal Basis for Processing

habaji processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and habaji — i.e., operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing conducted for habaji's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, and aggregated analytics for service improvement.
• Consent: Processing conducted on the basis of your freely given, specific, informed consent — principally for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing

habaji does not sell your personal data to any third party. habaji may share your personal data only in the following limited circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other financial institutions — for the sole purpose of processing your deposits and withdrawals.
• Game Providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe, Habanero, and other providers — limited to the session and round-level data required to deliver game content and resolve disputes.
• KYC & Fraud Prevention Partners: Third-party identity verification and fraud detection services that process document and behavioural data on habaji's behalf under strict data processing agreements.
• IT & Hosting Providers: Cloud infrastructure and security vendors that host the habaji platform and process data solely on habaji's documented instructions.
• Legal & Regulatory Authorities: Law enforcement agencies, courts, and regulatory bodies where habaji is legally required to disclose information in response to a lawful request.

All third-party service providers who process personal data on habaji's behalf are bound by data processing agreements that require them to apply appropriate security measures and to process data only for the stated purpose. habaji remains the data controller in respect of all player personal data.

7. Data Retention

habaji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the full duration of your registered habaji account.
• Closed Account Data: Following account closure, habaji retains identity, financial transaction, and bet history records for a minimum of five (5) years to satisfy anti-money laundering and legal compliance obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by applicable law.
• Support Communications: Retained for three (3) years from the date of the interaction for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained until consent is withdrawn, and for one (1) year following withdrawal as evidence of prior consent status.
• Technical/Log Data: Retained for twelve (12) months on a rolling basis, after which it is anonymised or deleted.

When personal data is no longer required for any of the above purposes, habaji will securely delete or irreversibly anonymise it in accordance with our internal data disposal procedures.

8. Cookies & Tracking Technologies

habaji uses first-party cookies and similar tracking technologies on habaji.club for the following purposes:

• Strictly Necessary Cookies: Session cookies required to maintain your habaji Login state, preserve your account session, and enable core platform functionality. These cannot be disabled without preventing platform use.
• Functional Cookies: Cookies that remember your language preference, game display settings, and other non-essential personalisation choices.
• Analytics Cookies: First-party cookies that collect anonymised, aggregated data about page visits, feature usage, and session duration to help habaji understand how the platform is used and identify areas for improvement.
• Security Cookies: Tokens and fingerprinting cookies used by our fraud detection system to identify suspicious device behaviour and prevent unauthorised account access.

habaji does not use third-party advertising cookies or cross-site tracking technologies that share your browsing data with external advertising networks. You may manage functional and analytics cookie preferences through your browser settings; however, disabling strictly necessary or security cookies may impair your ability to use the habaji platform.

9. Data Security

habaji implements a layered approach to data security, applying technical, organisational, and procedural safeguards appropriate to the sensitivity of the data we hold:

• Encryption in Transit: All data transmitted between your device and habaji.club is encrypted using TLS (Transport Layer Security). habaji enforces HTTPS across the entire platform — plain HTTP connections are not accepted.
• Encryption at Rest: Sensitive data fields — including payment method references, KYC document stores, and authentication credentials — are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to player personal data within habaji's systems is restricted on a strict need-to-know basis. Staff and system accounts are subject to role-based access controls, multi-factor authentication, and access audit logging.
• Penetration Testing: habaji's platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: habaji maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, habaji will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

While habaji takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your habaji Login credentials and for notifying support immediately at [email protected] if you suspect unauthorised access to your account.

10. Your Rights

As a habaji player, you have the following rights in relation to your personal data. To exercise any of these rights, contact habaji at [email protected] with a clear description of your request. habaji will respond within a reasonable timeframe and no later than thirty (30) days of receipt.

• Right of Access: You have the right to request a copy of the personal data habaji holds about you, together with information about how it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your habaji account.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to habaji's overriding legal retention obligations (see Section 7).
• Right to Restrict Processing: You have the right to request that habaji restrict the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on your consent or on a contract with you.
• Right to Object: You have the right to object to processing conducted on the basis of habaji's legitimate interests, including direct marketing. Where you object to direct marketing, habaji will cease that processing immediately.
• Right to Withdraw Consent: Where habaji processes your data on the basis of consent (principally for marketing), you may withdraw that consent at any time via your account dashboard or by contacting support. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

11. Children's Privacy

The habaji platform is strictly restricted to persons aged 18 years and above. habaji does not knowingly collect personal data from children or minors. If habaji discovers that a registered account belongs to a person under 18 years of age, that account will be immediately suspended, all associated transactions will be voided, and any balance will be returned to the verified payment source after investigation.

If you have reason to believe that a minor has registered a habaji account or is using your habaji account without your authorisation, please notify habaji support immediately at [email protected]. habaji will treat all such reports with the highest priority.

12. Third-Party Links

The habaji platform may, from time to time, reference third-party brands such as game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) and payment services (bKash, Nagad, Rocket). These are mentioned for identification and operational purposes only. habaji is not responsible for the privacy practices of any third-party organisations. Any personal data you provide directly to a third-party service — including through their standalone mobile applications or websites — is governed by that party's own privacy policy, over which habaji has no control or oversight.

13. Policy Updates

habaji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When material changes are made, habaji will publish the revised policy at habaji.club/privacy-policy and update the effective date at the top of the document. Where practicable, habaji will notify registered players of material changes via the mobile number or email address associated with their account.

Your continued use of the habaji platform following the publication of a revised Privacy Policy constitutes acceptance of the updated terms. We recommend reviewing this page periodically to remain informed of how habaji handles your personal data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way habaji handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled in English, 24 hours a day, seven days a week.

• Email: [email protected] — use subject line "Privacy Enquiry" for faster routing
• Live Chat: Available inside your habaji account dashboard after login
• Formal Data Rights Requests: Email [email protected] with subject line "Data Rights Request"