Hebaji Privacy Policy — Your Data, Your Control

Hebaji ("we", "our") takes your privacy seriously. This Privacy Policy ("Policy") describes what personal data we collect when you use the Hebaji.ws platform, how we use it, and how we keep it secure.

By accessing Hebaji's platform or creating an account, you agree to this policy. Key terms used throughout this policy are defined below:

• "Personal Data" — Any information that can directly or indirectly identify you.
• "Processing" — collection, storage, use, sharing, or deletion of data.
• "Third party" — Any individual or organization other than Hebaji.
• "Consent" — freely given, explicit consent from you.

Hebaji only collects the information necessary to deliver our services and maintain security. Here's a full breakdown:

Hebaji collects information in several ways — sometimes directly from you, and sometimes automatically:

Collected directly

• Forms completed during account registration.
• Documents submitted for KYC verification.
• Payment details provided during deposits and withdrawals.
• Contact support via Live Chat or email.
• Completing surveys or feedback forms.

Automatic Collection

• Cookies and similar technologies (see Section 8 for details).
• Log files — IP address, access time, pages visited.
• Device information — operating system, browser version.
• Network Information — ISP, connection type.

Hebaji uses your data only for specific, lawful purposes. The legal basis for each purpose is outlined below:

• Account Management: Registration, login, and identity verification.
• Service Delivery: Betting, payment processing, and result notifications.
• Security: Prevention of fraud, money laundering, and illegal activities.
• Legal Obligation: Compliance with KYC and AML regulations.
• Support: Troubleshooting and customer support.
• Contact: Sending important updates and transaction confirmations.
• Improvement: Improving the overall platform experience.
• Marketing (with consent): Informing you about promotions and offers — you can opt out at any time.

Hebaji never sells your personal data for commercial purposes or shares it without your consent. However, data may be shared in the following limited circumstances:

Permitted cases for data sharing

• Payment Providers: Mobile Pay, Nagad, Rocket — only the data necessary to process transactions.
• Game Providers: Evolution Gaming, Pragmatic Play — for managing gameplay.
• Legal authorities: To comply with court orders or assist with lawful investigations.
• Security Services: For fraud prevention and AML compliance.
• Technology Service Providers: Hosting & cybersecurity — governed by strict confidentiality agreements.

Hebaji does not hold your data indefinitely. Each category of data has a defined retention period:

Once the retention period expires, data is securely deleted or anonymized.

Hebaji employs industry-leading security measures to protect your data. Our technical safeguards include:

• SSL/TLS 256-bit encryption: All communications are encrypted.
• Two-factor authentication (2FA): OTP verification at login.
• Firewall & DDoS Protection: Preventing unauthorized access.
• Regular Security Audits: Audited by third parties.
• Data Backup: Regular backups to secure servers.
• Access Controls: Only authorized personnel can access your data.
• Security Training: Regular training for all staff.

Hebaji uses cookies and similar technologies to enhance your experience. Cookies are small text files stored in your browser.

Cookie Type

• Essential Cookies: Maintaining login sessions and ensuring security. The site cannot function without these.
• Functional Cookies: Remembering your preferences, such as language settings.
• Analytics cookies: Understanding which pages are used most — anonymised data.
• Security Cookies: Detecting fraud and suspicious activity.

Most browsers allow you to manage cookies through their settings. Please note that disabling essential cookies may affect the platform's functionality.

You have clear rights over your personal data on Hebaji. Each right is explained in detail below:

Hebaji's services are strictly for users aged 18 and above. We do not knowingly collect data from anyone under the age of 18.

• Date of birth is verified at registration.
• Age is confirmed during KYC verification.
• If any account holder is found to be under 18, their account is terminated immediately.

Hebaji's servers and technology infrastructure are located across multiple countries. Your data may be transferred internationally. In such cases, we ensure:

• The destination country maintains adequate data protection laws.
• Strict confidentiality agreements are in place with all transfer partners.
• All transfers occur exclusively through encrypted channels.

Hebaji may update this Privacy Policy from time to time. When changes are made:

• A notice will be posted on the website and the last updated date at the top of the page will be revised accordingly.
• You will be notified via SMS or email of any important changes.
• Continued use of the site after any changes will be considered acceptance of the updated policy.

For any privacy-related questions, requests, or complaints, please get in touch with us:

• Email: [email protected] (for privacy-related inquiries)
• Live Chat: Available 24/7 — get an instant response
• Response Time: Privacy requests responded to within 30 days

For serious data protection concerns, you may also file a complaint with the relevant regulatory authority. However, we encourage you to reach out to us directly first so we can resolve the matter together.

When signing up on an online platform, many people wonder — where does my data go, and how will it be used? Hebaji takes these concerns seriously.

Many people in Bangladesh are hesitant to share their mobile number out of fear of spam calls. Hebaji's position is clear — your number is used solely for account security. It is never sold to third parties or handed over to telemarketing companies.

What Hebaji Does for Data Security That Many Others Don't

Hebaji doesn't just write policies — it lives by them. The platform undergoes independent security audits every year. Staff can only access the data relevant to their specific role; no one has blanket access to the entire database. These aren't rules on paper — they're everyday practice.

Your Control Over Your Data

Hebaji believes data control should rest with users, not the company. That means you can find out what information we hold about you at any time, request corrections whenever needed, and ask for your data to be deleted when you close your account — everything beyond what we are legally required to retain will be removed.

Opt out of marketing messages

Some sites are designed to make opting out of promotional messages nearly impossible. On Hebaji, it's simple. Send one message via live chat — "Stop marketing messages" — and it will be done within 24 hours. No runaround.

What Happens in the Event of a Data Breach

In the unlikely event of a security breach (which we make every effort to prevent), affected members will be notified within 72 hours. Full details of the incident — what data was affected and what steps have been taken — will be communicated transparently. That is Hebaji's commitment.