Hebaji Privacy Policy

Hebaji ("we", "us", "the platform") is committed to protecting the privacy of every person who uses hebaji.vip. This Privacy Policy explains in plain language what personal data hebaji collects from you, how that data is used, who it may be shared with, and what rights you have over your own information.

This policy applies to all users of the hebaji platform — whether you are a registered player, a visitor browsing the site, or someone who has downloaded the hebaji app. By using hebaji in any capacity, you acknowledge that you have read and understood this Privacy Policy.

Hebaji takes data privacy seriously. We do not sell your personal data. We do not share it with advertisers. We collect only what we genuinely need to operate the platform, process your transactions, and keep your account secure. That's the hebaji approach to privacy — straightforward and honest.

Hebaji collects personal data in several ways — directly from you when you register or contact support, automatically when you use the platform, and from payment providers when you make a deposit or withdrawal. The table below summarises the categories of data hebaji collects and why.

Hebaji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law or responsible gaming obligations.

Every piece of data hebaji collects is used for a specific, legitimate purpose. We do not process your data in ways that are incompatible with the reasons it was originally collected. Here is how hebaji uses your personal information:

• To create and manage your hebaji account, including verifying your identity and age before you can deposit or play.
• To process deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate transaction records for your account.
• To detect and prevent fraud, money laundering, and other financial crimes that could harm you or the integrity of the hebaji platform.
• To provide customer support — when you contact hebaji, we use your account data and communication history to resolve your query efficiently.
• To send you important account notifications such as deposit confirmations, withdrawal updates, and security alerts. These are not marketing messages and cannot be opted out of while your account is active.
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour.
• To improve the hebaji platform by analysing aggregated, anonymised usage data. This helps us understand which features work well and where improvements are needed.
• To comply with legal and regulatory obligations that apply to hebaji as an online gaming operator.

Hebaji processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing:

• Contract performance: Processing your data is necessary to fulfil the contract between you and hebaji — for example, to operate your account and process your transactions.
• Legal obligation: Hebaji is required by law to collect and retain certain data, including identity verification records and transaction histories, for anti-money laundering and fraud prevention purposes.
• Legitimate interests: Hebaji has a legitimate interest in keeping the platform secure, preventing fraud, and improving the user experience. We only rely on this basis where our interests are not overridden by your privacy rights.
• Consent: Where hebaji relies on your consent to process data — such as for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Hebaji does not sell your personal data. We do not share it with advertisers, data brokers, or any third party for commercial gain. However, there are limited circumstances in which hebaji may share your data with trusted third parties:

• Payment processors: Hebaji shares the minimum necessary financial data with bKash, Nagad, and Rocket to process your deposits and withdrawals. These providers have their own privacy policies and security standards.
• Identity verification providers: To comply with KYC (Know Your Customer) requirements, hebaji may share identity documents with regulated verification service providers.
• Legal authorities: Hebaji will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by applicable law, a valid legal order, or to protect the rights and safety of hebaji users.
• Platform service providers: Hebaji works with carefully selected technology partners who help operate the platform — such as hosting providers and security services. These partners are contractually bound to process your data only on hebaji's instructions and to maintain appropriate security standards.

Hebaji uses cookies and similar tracking technologies to make the platform work properly and to understand how it is being used. A cookie is a small text file stored on your device when you visit hebaji.vip.

• Essential cookies: These are required for the hebaji platform to function. They keep you logged in during your session and ensure that your account settings are applied correctly. You cannot opt out of essential cookies while using hebaji.
• Analytics cookies: Hebaji uses anonymised analytics data to understand how players navigate the platform, which pages are most visited, and where technical issues occur. This data is aggregated and cannot be used to identify individual users.
• Security cookies: These help hebaji detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the hebaji platform. Hebaji does not use third-party advertising cookies or tracking pixels for retargeting purposes.

Protecting your personal data is one of hebaji's most important responsibilities. We use a combination of technical and organisational measures to keep your information safe from unauthorised access, loss, or misuse.

• All data transmitted between your device and hebaji.vip is encrypted using 256-bit SSL/TLS encryption — the same standard used by major banks.
• Hebaji stores personal data on secure servers with restricted access. Only authorised personnel who need the data to perform their job functions can access it.
• Hebaji's systems are monitored around the clock for suspicious activity, intrusion attempts, and data anomalies.
• Payment data is handled in accordance with industry security standards. Hebaji does not store full payment credentials on its own servers.
• In the event of a data breach that poses a risk to your rights and freedoms, hebaji will notify affected users promptly and take immediate steps to contain and remediate the breach.

Hebaji retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data and transaction records are retained for a minimum of five years after account closure to comply with anti-money laundering regulations.
• Customer support communications are retained for two years from the date of the last interaction, unless a longer period is required for an ongoing dispute or legal matter.
• Technical and usage data collected for analytics purposes is anonymised after 12 months and may be retained in anonymised form indefinitely for platform improvement purposes.
• Identity verification documents are retained for the period required by applicable KYC regulations, typically five years from the date of verification.

When your data is no longer required, hebaji will securely delete or anonymise it. You may request early deletion of certain data by contacting support, subject to any legal retention obligations that apply.

As a hebaji user, you have meaningful rights over your personal data. Hebaji is committed to honouring these rights promptly and without unnecessary barriers. You can exercise any of the following rights by contacting hebaji support:

Hebaji is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not use hebaji, create an account, or provide any personal information to the platform.

If hebaji becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account will be closed. If you believe a minor has registered on hebaji, please contact support at [email protected] so we can investigate and take appropriate action.

Hebaji may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make changes, the "Last Updated" date at the top of this page will be revised accordingly.

For significant changes that materially affect how your data is used, hebaji will notify registered players via email or an in-platform notification before the changes take effect. Your continued use of hebaji after the updated policy has been published constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how hebaji has handled your personal information, please get in touch with our support team. We take every privacy query seriously and will respond as quickly as possible.

• Email: [email protected]
• Live Chat: Available within your hebaji account after login
• Response time: Privacy requests are handled within 30 days of receipt

Hebaji is committed to resolving any privacy concern you raise. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.