hybajj Privacy Policy

When you create a hybajj account, we collect the personal data you provide during the registration process. This includes your full legal name, date of birth, residential address in Bangladesh (city, district, and postal area), email address, and mobile phone number. This information is required to open and maintain your account, complete identity verification, and comply with our age restriction policy (21+ only).

hybajj may request copies of identity documents at any stage of your membership, including your National Identity Card (NID), passport, or a recent utility bill or bank statement confirming your residential address. These documents are processed solely for the purpose of verifying your identity, confirming your age, and satisfying our anti-money laundering (AML) obligations. They are stored securely and are not shared with any third party except where required by law or a competent authority.

When you make a deposit or withdrawal, we collect transactional data including the payment method used (e.g., bKash, Nagad, Rocket, Upay, bank name), transaction reference numbers, amounts in Bangladeshi Taka (BDT), and timestamps. hybajj does not store complete card numbers or mobile banking PINs. Payment authentication is handled directly by the respective payment service providers through encrypted API connections.

hybajj automatically collects certain technical data when you access the Platform, including your IP address, device type and model, operating system version, browser type and version, session duration, pages visited, games played, bet history, and referral source. This data is used to maintain platform security, improve the user experience, detect fraudulent activity, and personalise content where applicable. We do not use this data to build profiles for sale to third parties.

If you contact hybajj customer support via email or any in-platform messaging channel, we retain records of those communications, including timestamps, the content of your messages, and any attachments. These records are used to resolve your query, improve our support quality, and, where relevant, as evidence in the event of a formal dispute.

The primary purpose for which hybajj uses your personal data is to provide, operate, and maintain your account and the services you have requested. This includes processing your deposits and withdrawals, verifying your identity, crediting bonuses, settling bets, and delivering customer support. Without this data, hybajj would be unable to provide the core platform services.

hybajj is required to process and retain certain categories of personal data in order to comply with applicable anti-money laundering (AML) obligations, age verification requirements, and any lawful requests received from competent authorities. Where hybajj is legally required to disclose member data to a government body, law enforcement agency, or court, we will do so and, where permitted by law, will notify the affected member promptly.

hybajj uses technical and identity data to identify and prevent fraudulent activity, including multiple-account abuse, bonus fraud, money laundering, and unauthorised access attempts. Our automated systems and security team continuously monitor the Platform for suspicious patterns. Where fraud is detected, hybajj may suspend accounts, withhold funds, and share relevant data with appropriate authorities as required.

hybajj uses bet history, session data, and deposit frequency information to monitor for signs of problem gambling behaviour. Where our systems identify a member who may be at risk, hybajj may reach out proactively to offer responsible gaming resources, apply temporary deposit limits, or prompt the member to review their account settings. This processing is carried out in the legitimate interest of player welfare and is not used for any commercial purpose.

With your consent, hybajj may use your email address or mobile number to send you information about new games, promotions, bonuses, and platform updates. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by updating your notification preferences within your hybajj account settings. Withdrawal of marketing consent does not affect the lawfulness of communications sent prior to that withdrawal.

Aggregated and anonymised usage data — such as which games are played most frequently, average session durations, and deposit patterns by payment method — is analysed internally to improve the hybajj platform, introduce new features, and optimise the user experience for members across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. This analysis is performed on data sets that cannot be used to re-identify individual members.

hybajj shares personal data with carefully selected third-party service providers who assist us in delivering the Platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, and partner banks), identity verification services, fraud detection providers, game studios (such as Pragmatic Play, Evolution Gaming, and Spribe), and IT infrastructure providers. All third-party providers are required by contract to process your data solely for the purposes for which it has been shared, to maintain appropriate security standards, and not to disclose it further without hybajj's written consent.

hybajj may disclose personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by law, by a valid court order, or where hybajj reasonably believes that disclosure is necessary to protect the rights, property, or safety of hybajj, its members, or the general public. In such cases, hybajj discloses only the minimum data required to satisfy the legal obligation.

hybajj does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for their own marketing, advertising, or commercial purposes. This commitment applies absolutely and without exception.

hybajj uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to maintain your login session, remember your preferences, prevent fraud, and measure platform performance. Cookies are small text files stored on your device by your web browser. They do not contain executable code and cannot be used to access other data on your device.

hybajj uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and notification options.
• Analytics Cookies: Used to measure how members use the Platform in aggregate, helping hybajj identify performance issues and improve the user experience. These cookies collect anonymised data only.

You may control or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in to and use your hybajj account. Detailed instructions for managing cookies are available in your browser's help documentation. Continued use of the hybajj Platform after being informed of our cookie practices constitutes consent to our use of cookies as described in this Policy.

hybajj retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. In general terms, account and identity data is retained for the duration of your membership plus a minimum of five (5) years following account closure. Financial transaction records are retained for a minimum of seven (7) years in line with standard financial record-keeping obligations. Technical and usage data is retained for up to twenty-four (24) months, after which it is either deleted or anonymised.

You may request deletion of your personal data by contacting [email protected]. hybajj will action valid deletion requests within thirty (30) days, subject to any legal obligation to retain certain data (for example, financial transaction records that must be kept for AML compliance purposes). Where data cannot be deleted due to a legal retention requirement, hybajj will inform you of the applicable retention period and the legal basis for continued retention.

• Right of Access: You may request a copy of the personal data hybajj holds about you, free of charge, once per calendar year.
• Right of Rectification: You may request correction of any inaccurate or incomplete personal data held in your hybajj account.
• Right to Erasure: You may request deletion of your personal data, subject to applicable legal retention obligations as noted in Section 5.
• Right to Restrict Processing: In certain circumstances, you may request that hybajj restrict the processing of your data while a query or complaint is being investigated.
• Right to Object: You may object to hybajj processing your personal data for direct marketing purposes at any time, with immediate effect.
• Right to Data Portability: You may request that hybajj provide your personal data in a structured, commonly used, machine-readable format where technically feasible.

hybajj implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, password hashing and salting for stored credentials, role-based access controls limiting internal staff access to personal data on a need-to-know basis, regular security vulnerability assessments, and automated monitoring for suspicious access patterns.

In the event of a personal data breach that poses a risk to your rights and freedoms, hybajj will notify affected members without undue delay and will take immediate steps to contain and remediate the breach. Notifications will be sent to the email address registered on your hybajj account. If you suspect that your account has been compromised, you should contact [email protected] immediately so that hybajj can take protective action.

hybajj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When a material change is made, hybajj will notify active members via the email address registered on their account or via an on-platform notice prior to the change taking effect. The "Last updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically. If you have any questions about how hybajj handles your personal data, please contact us at [email protected]. Our support team is available to assist members across Bangladesh seven days a week.