Effective Date: This Privacy Policy is effective as of 2026 and applies to all users of the hbahee platform, including all players accessing hbahee from any location within Bangladesh. This policy should be read in conjunction with the hbahee Terms & Conditions. By using the hbahee platform, you confirm that you have read and accepted this Privacy Policy.
Section 1
Introduction
hbahee ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at hbahee.net. As part of operating this platform, hbahee collects and processes certain personal data about users ("you", "your") who register, visit, and use the hbahee platform.
hbahee is committed to protecting the privacy of all users and to processing personal data responsibly, transparently, and in accordance with the principles of data minimisation, purpose limitation, and data security. This Privacy Policy explains in plain terms exactly what data hbahee collects, how it is used, who it may be shared with, how long it is retained, and what rights you have in relation to your personal data.
This Privacy Policy applies to all personal data collected through the hbahee website, account registration and management system, payment processing infrastructure, customer support channels, and any other service or tool that forms part of the hbahee platform. It does not apply to third-party websites, game providers, or payment processors that have their own privacy policies governing their data practices.
Section 2
Personal Data We Collect
hbahee collects the following categories of personal data in connection with the operation of the platform:
| Category |
Specific Data Points |
Purpose |
| Identity Data |
Full name, date of birth, gender, nationality, government-issued ID number |
Account registration, age and identity verification |
| Contact Data |
Email address, phone number, residential address |
Account communication, support, notifications |
| Financial Data |
bKash/Nagad/Rocket account numbers, transaction history, deposit and withdrawal records |
Payment processing, fraud prevention, compliance |
| Technical Data |
IP address, device type, browser type, operating system, session timestamps |
Platform security, fraud detection, analytics |
| Usage Data |
Pages visited, games played, betting history, session duration, click patterns |
Platform improvement, personalisation, responsible gaming monitoring |
| Communication Data |
Support chat transcripts, email correspondence, feedback submissions |
Support quality, dispute resolution, compliance records |
| Verification Documents |
Copies of national ID, passport, utility bills (where required for KYC) |
Identity verification, anti-money laundering compliance |
Data Minimisation: hbahee collects only the personal data that is necessary for the specific purposes described in this Privacy Policy. We do not collect personal data speculatively or for purposes that have not been defined. Where data is no longer needed for its original purpose, it is deleted or anonymised in accordance with our retention schedule.
Section 3
How We Collect Your Data
hbahee collects personal data through the following channels and mechanisms:
- Direct Submission: Data you provide voluntarily when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or submitting a complaint. This includes identity information, contact details, and financial account numbers.
- Automated Technical Collection: Data collected automatically when you access the hbahee platform, including IP addresses, device identifiers, browser information, session data, and usage analytics. This data is collected using cookies, server logs, and similar technologies — see Section 7 (Cookies & Tracking) for more detail.
- Payment Providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or other payment channels, those providers transmit transaction confirmation data to hbahee. hbahee does not receive or store your full mobile banking PIN or password — only transaction reference data and account identifiers necessary to confirm and reconcile payments.
- Identity Verification Services: Where hbahee uses third-party identity verification tools to process KYC (Know Your Customer) checks, those services may transmit verification status and document authenticity results to hbahee.
- Support Interactions: When you contact hbahee via live chat, email, or WhatsApp, the content of those communications is recorded and retained as part of your account history.
Section 4
How We Use Your Data
hbahee uses the personal data collected from users for the following defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your consent or establishing a separate legal basis:
- Account Management: To create, maintain, and administer your hbahee account, including processing your registration, managing your profile, and enabling you to log in and use the platform's features.
- Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported Bangladeshi payment channels. Financial data is used solely to complete and reconcile transactions and to maintain accurate account balance records.
- Identity Verification: To verify your identity and age in accordance with our 18+ policy and our Know Your Customer (KYC) obligations. Verification is required before withdrawals are processed and may be requested at other points during your use of the platform.
- Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account abuse, bot usage, and other prohibited conduct as defined in the hbahee Terms & Conditions. Technical data including IP addresses and device fingerprints is used as part of our fraud detection systems.
- Customer Support: To respond to your queries, complaints, and requests submitted via live chat, email, or other support channels. Communication data is retained to ensure continuity of support and to facilitate dispute resolution.
- Responsible Gaming Monitoring: To monitor gameplay patterns and identify indicators of problem gambling behaviour. Where such indicators are detected, hbahee's responsible gaming team may make proactive contact to offer support tools including deposit limits, session timers, or self-exclusion options.
- Platform Improvement & Analytics: To analyse usage patterns, identify technical issues, and improve the functionality, design, and content of the hbahee platform. Usage analytics are reviewed in aggregated and anonymised form where possible.
- Promotional Communications: To send you relevant promotional offers, bonus notifications, and platform updates by email or in-platform notification, subject to your communication preferences. You may opt out of marketing communications at any time via your account settings or by contacting support.
- Legal Compliance: To comply with applicable legal and regulatory requirements, including the retention of financial records, cooperation with law enforcement investigations, and the implementation of anti-money laundering controls.
Section 5
Legal Basis for Processing
hbahee processes your personal data on the basis of the following legal grounds, depending on the specific processing activity involved:
- Contractual Necessity: The majority of processing carried out by hbahee is necessary for the performance of the contract between you and hbahee — specifically, the Terms & Conditions you accepted upon registration. This includes account management, payment processing, identity verification, and customer support.
- Legal Obligation: Certain processing activities are required for hbahee to comply with applicable legal obligations, including financial record-keeping, KYC/AML checks, and cooperation with law enforcement or regulatory bodies.
- Legitimate Interests: hbahee processes certain data — including technical data and usage data — on the basis of its legitimate interests in operating a secure, fair, and functional platform. This includes fraud detection, security monitoring, and platform analytics. Where legitimate interests are relied upon, hbahee has assessed that those interests are not overridden by your data protection rights.
- Consent: Where hbahee sends you marketing communications or uses non-essential cookies, this is done on the basis of your consent. You may withdraw consent at any time by adjusting your communication preferences in your account settings or by contacting the support team at [email protected].
Withdrawal of Consent: Withdrawing consent for marketing communications or non-essential cookies will not affect the lawfulness of any processing carried out prior to your withdrawal, and will not affect processing carried out on other legal grounds such as contractual necessity or legal obligation.
Section 6
Data Sharing & Disclosure
hbahee does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared in the following limited and controlled circumstances only:
- Payment Processors: Transaction data is shared with payment service providers including bKash, Nagad, Rocket, Upay, and partner banks such as Dutch-Bangla Bank, City Bank, and BRAC Bank, solely to facilitate the processing of deposits and withdrawals. These providers process your data under their own privacy policies and are contractually bound to handle it securely.
- Identity Verification Providers: Where third-party KYC services are used to verify your identity documents, the relevant data is shared with those providers solely for the purpose of completing verification. Verification providers are bound by strict data handling agreements with hbahee.
- Game Technology Providers: Aggregated and anonymised gameplay data may be shared with game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi for platform integration and technical support purposes. Individually identifiable personal data is not shared with game studios.
- Legal and Regulatory Authorities: hbahee may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by law, court order, or in connection with the investigation of fraud, money laundering, or other financial crimes.
- Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the hbahee business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.
- Professional Advisers: hbahee may share data with legal advisers, auditors, or accountants where necessary in connection with legal proceedings, compliance reviews, or financial audits. All such advisers are bound by professional confidentiality obligations.
No Sale of Data: hbahee will never sell your personal data to advertisers, data brokers, or any other commercial third party. Your data exists on the hbahee platform to serve your account and protect your interests — not to generate revenue through data commercialisation.
Section 7
Cookies & Tracking Technologies
The hbahee platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session when you are logged in, and to collect analytics data that helps us understand how users interact with the platform. The following categories of cookies are used:
- Strictly Necessary Cookies: These cookies are essential for the hbahee platform to function. They include session cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and cookies that remember your preferences such as language settings. These cookies cannot be disabled without affecting core platform functionality.
- Analytics Cookies: These cookies collect aggregated, anonymised data about how users navigate the hbahee platform — including which pages are visited most frequently, how long sessions last, and which features are used most. This data is used to improve the platform design and content. Analytics cookies are only placed with your consent.
- Functional Cookies: These cookies remember choices you have made on the platform — such as your preferred display settings or previously viewed game categories — in order to provide a more personalised experience. Functional cookies are only placed with your consent.
- Fraud Prevention Cookies: hbahee uses certain technical identifiers — including device fingerprint data stored in cookies — as part of its fraud detection and account security systems. These cookies help identify unusual login patterns and flag suspicious activity on your account.
You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair core platform functionality including the ability to log in and maintain a session. Disabling analytics or functional cookies will not affect your ability to use the platform but may result in a less personalised experience.
Section 8
Data Retention
hbahee retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:
- Account Data: Personal data associated with your active hbahee account is retained for the duration of your account's active status and for a period of five years following account closure, in order to comply with financial record-keeping requirements and to facilitate the resolution of any post-closure disputes.
- Financial Transaction Records: Records of deposits, withdrawals, and account balances are retained for a minimum of seven years from the date of the transaction, in accordance with financial compliance requirements applicable to the hbahee platform.
- Identity Verification Documents: Copies of identity documents collected during KYC verification are retained for five years following account closure or the date of verification, whichever is later.
- Support Communications: Records of live chat transcripts, email correspondence, and complaint records are retained for three years from the date of the interaction, to support dispute resolution and service quality monitoring.
- Technical and Usage Data: Log files, IP address records, and session data are retained for a maximum of 12 months, after which they are deleted or irreversibly anonymised.
- Marketing Preferences: Records of your consent to or opt-out from marketing communications are retained indefinitely to ensure that hbahee can demonstrate compliance with your stated preferences.
Post-Retention Deletion: Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to your identity. hbahee conducts periodic data audits to ensure that retention schedules are being applied correctly across all data categories.
Section 9
Data Security
hbahee takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- SSL/TLS Encryption: All data transmitted between your device and the hbahee platform is encrypted using SSL/TLS protocols. This applies to all pages of the platform, including the login page, the cashier, and all game pages.
- Access Controls: Access to personal data held by hbahee is restricted to authorised personnel only, on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations and receive training on data protection responsibilities.
- Secure Storage: Personal data and financial records are stored on secured servers protected by firewalls, intrusion detection systems, and regular security audits.
- Password Hashing: Account passwords are stored in hashed form using a strong cryptographic hashing algorithm. hbahee does not store passwords in plaintext and cannot retrieve your password — only reset it through a verified account recovery process.
- Fraud Detection Systems: hbahee employs automated fraud detection and anomaly monitoring systems that operate continuously to identify suspicious activity on user accounts and across the platform.
Your Role in Security: While hbahee takes extensive measures to protect your data on our side, you also play an important role. You must keep your hbahee login credentials confidential, use a strong and unique password, and notify hbahee immediately at
[email protected] if you suspect that your account has been accessed without your authorisation. hbahee will not be liable for losses arising from your failure to maintain adequate account security.
Section 10
Your Data Rights
As a user of the hbahee platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the hbahee data team at [email protected] with the subject line "Data Rights Request". hbahee will respond to all rights requests within 30 days of receipt:
- Right of Access: You have the right to request a copy of the personal data that hbahee holds about you. Upon a verified request, hbahee will provide a summary of your personal data in a readable format within 30 days.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by hbahee. You may update certain data directly via your account settings, or by contacting support for data categories that are not user-editable.
- Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer needed for the purpose it was collected, or where you have withdrawn your consent for processing based solely on consent. This right is subject to exceptions where hbahee has a legal obligation to retain the data, such as financial record-keeping requirements.
- Right to Restrict Processing: You have the right to request that hbahee restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction to deletion.
- Right to Data Portability: Where processing is carried out on the basis of consent or contractual necessity and by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data where processing is based on hbahee's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Section 11
Children's Privacy
The hbahee platform is strictly intended for adults aged 18 and above. 18+ only. hbahee does not knowingly collect, process, or store any personal data from individuals under the age of 18.
Age verification is a mandatory part of the hbahee registration and withdrawal process. Where hbahee identifies or suspects that a user is under the age of 18, the account will be immediately suspended, all pending transactions will be frozen pending investigation, and any funds deposited by the underage user will be returned via the original payment method after deducting any costs reasonably incurred in connection with the investigation.
If you believe that a minor has registered on the hbahee platform or that hbahee has inadvertently collected data from a person under the age of 18, please contact the hbahee support team immediately at [email protected]. hbahee will investigate all such reports as a high-priority matter and will take immediate remedial action where an underage account is confirmed.
Parents and guardians who are concerned about underage access to gambling platforms are encouraged to use parental control software to restrict access to gambling websites and to maintain open communication with young people about the risks associated with gambling.
Section 12
Third-Party Links & Services
The hbahee platform integrates third-party game content and payment services as part of delivering a complete gaming and betting experience to users in Bangladesh. While hbahee takes care to work only with reputable and established service providers, please note the following:
- Game content provided by studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi is delivered via embedded interfaces. When you interact with these games, the game studio's own software may collect technical data about your session. This collection is governed by the respective studio's privacy practices, which are separate from and independent of this Privacy Policy.
- Payment transactions processed via bKash, Nagad, Rocket, Upay, or partner banks are governed by those providers' own terms and privacy policies. hbahee recommends that you review the privacy notices of any payment provider you use in connection with your hbahee account.
- hbahee is not responsible for the privacy practices, data handling standards, or security measures of any third-party service provider. Your use of third-party services in connection with hbahee is at your own discretion and risk in respect of that third party's data practices.
Section 13
Updates to This Privacy Policy
hbahee reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made to the Privacy Policy, hbahee will notify registered users by posting a prominent notice on the platform and, where practicable, by email to the address associated with the user's account.
The most current version of this Privacy Policy will always be accessible at hbahee.net/privacy-policy. The effective date displayed at the top of this document will be updated to reflect the date of the most recent revision. Your continued use of the hbahee platform following the publication of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised policy, you must cease use of the platform and close your account.
hbahee recommends that you review this Privacy Policy periodically — particularly before providing any new categories of personal data or before using any new platform features that may involve additional data processing.
Section 14
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to hbahee's handling of your personal data, please contact the hbahee data and privacy team through the following channels:
- Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate
- Live Chat: Available 24/7 via the hbahee account dashboard — for urgent data security concerns, live chat is the fastest channel
- Response Time: All privacy-related enquiries are acknowledged within 24 hours. Substantive responses to data rights requests are provided within 30 days of receipt of a verified request
hbahee is committed to handling all privacy enquiries with the seriousness and confidentiality they deserve. All communications relating to personal data rights are handled by trained staff and are not shared beyond the team directly responsible for responding to your request.
Related Policies: This Privacy Policy should be read alongside the hbahee
Terms & Conditions and
Responsible Gaming policy, which together form the complete framework governing your use of the hbahee platform.