hibagee Privacy Policy
Protecting Your Data in Bangladesh

This Privacy Policy ("Policy") describes how hibagee ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data submitted by users ("you", "the Player", "your") when you access or use any part of the hibagee online casino and sports betting platform, including its website, mobile interface, games, promotional communications, and customer support channels.

By registering an account on hibagee, completing the KYC verification process, making a deposit, or otherwise using the platform in any capacity, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should cease using the platform and request account closure by contacting support@hibagee.

This Policy should be read in conjunction with the hibagee Terms & Conditions and the hibagee Responsible Gaming Policy, both of which are incorporated by reference into this document.

hibagee collects personal data across several categories depending on how you interact with the platform. The categories below describe both the types of data collected and the circumstances under which each category is gathered.

1.1 Registration and Account Data

When you create a hibagee account, we collect the following mandatory information: your full legal name, date of birth, residential address in Bangladesh (including district and division), a valid email address, and a mobile phone number registered in Bangladesh. You will also create a username and password during registration. This information is required to open and manage your account and cannot be withheld without preventing account creation.

1.2 Identity Verification (KYC) Data

As part of the mandatory Know Your Customer (KYC) verification process, you may be required to submit copies of one or more of the following identity documents: National Identity Card (NID), passport, or driver's licence; a proof-of-address document dated within the past three months (such as a utility bill, bank statement, or mobile operator statement); and, where applicable, proof of payment method ownership (such as a screenshot of your bKash, Nagad, or Rocket wallet). These documents are processed securely and retained in accordance with the data retention schedule set out in Section 5 of this Policy.

1.3 Financial Transaction Data

Every deposit and withdrawal you make on hibagee is logged and associated with your account. Transaction records include the amount in Bangladeshi Taka (BDT), the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction reference number issued by the payment provider, the date and time (Bangladesh Standard Time, UTC+6), and the outcome of the transaction. We do not store full mobile financial service (MFS) PINs, full bank account credentials, or card numbers in our systems.

1.4 Gameplay and Betting Activity Data

hibagee maintains detailed logs of all gaming and betting activity conducted via your account. This includes game session data (game titles, session start and end times, stake amounts, and outcomes), sports betting records (markets selected, odds at time of placement, stake, and settlement result), and bonus and promotion usage records. This data is used for account integrity, responsible gaming monitoring, dispute resolution, and regulatory compliance purposes.

1.5 Technical and Device Data

When you access hibagee, our servers automatically record certain technical information, including your IP address, browser type and version, operating system, device type (desktop, smartphone, or tablet), screen resolution, referring URL, pages visited during your session, and session duration. This data is collected passively and is used for security monitoring, fraud prevention, and platform performance optimisation.

1.6 Communications Data

If you contact the hibagee support team via live chat or email, records of those communications — including the content of messages, timestamps, and any attachments you send — are retained to ensure service continuity, quality assurance, and dispute resolution. If you opt in to receive promotional communications from hibagee, your email address and communication preferences are stored to manage those communications.

hibagee processes your personal data only for lawful, specific, and clearly defined purposes. The following describes each purpose for which your data is used and the legal basis under which such processing occurs.

• Account Operation: To create, authenticate, and manage your hibagee account, including enforcing the one-account-per-player rule and maintaining account security.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi bank accounts, and to maintain accurate financial records in BDT.
• KYC and Age Verification: To verify that all registered players are aged 18 or above and to confirm the identity and Bangladeshi residency of account holders, in fulfilment of our obligations under anti-money laundering and responsible gaming commitments.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and unauthorised account access.
• Responsible Gaming Monitoring: To identify behavioural patterns that may indicate problematic gambling, and to proactively offer responsible gaming tools such as deposit limits, session reminders, and self-exclusion options.
• Customer Support: To respond to your enquiries, process account requests, and resolve disputes in a timely and informed manner.
• Platform Improvement: To analyse aggregated, anonymised usage data to identify performance issues, improve game selection, and enhance the overall hibagee user experience.
• Promotional Communications: To send you relevant bonus offers, seasonal promotions (e.g., BPL season offers, Eid bonus campaigns, Pohela Boishakh promotions), and platform updates — but only where you have opted in to receive such communications. You may withdraw consent to marketing communications at any time by contacting support@hibagee.

hibagee uses cookies and similar tracking technologies to deliver a functional, secure, and personalised platform experience. A cookie is a small text file stored on your device by your web browser when you visit hibagee. Cookies allow the platform to remember your session, preferences, and login state across page loads and visits.

3.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are required for the hibagee platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: These remember your account preferences such as language setting (English), preferred payment method, and responsible gaming tool configurations. Disabling functional cookies may reduce the convenience of your platform experience.
• Analytics Cookies: These collect anonymised, aggregated data about how players navigate hibagee — which pages are visited most frequently, where players spend the most time, and where technical errors occur. This data is used exclusively for internal platform improvement and is never sold or shared with third-party advertisers.
• Security Cookies: These assist in detecting suspicious login attempts, identifying unusual transaction patterns, and enforcing the one-account-per-player rule by cross-referencing device fingerprints with registered account data.

3.2 Managing Cookies

You may control cookie settings through your browser's privacy settings. Most modern browsers — including Chrome, Firefox, Safari, and Samsung Internet (commonly used on Bangladeshi Android devices) — allow you to view, delete, and block cookies on a per-site basis. Please note that blocking strictly necessary cookies will prevent you from logging in to your hibagee account. Blocking analytics and functional cookies will not affect your ability to access the platform or place bets.

hibagee does not currently use third-party advertising cookies or cross-site tracking pixels. Any future change to this practice will be reflected in an updated version of this Privacy Policy prior to implementation.

hibagee does not sell, rent, or trade your personal data to any third party. We share personal data only in the specific and limited circumstances described below, and only to the extent strictly necessary for each stated purpose.

4.1 Payment Processing Partners

To process your deposits and withdrawals, hibagee shares necessary transaction data — including your registered mobile number and transaction amount — with the relevant mobile financial service operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank). These partners receive only the minimum data required to complete the transaction and are contractually prohibited from using your data for any purpose other than payment processing.

4.2 Game Technology Providers

The casino games and sports betting markets available on hibagee are powered by third-party technology providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier to facilitate game loading and round settlement. These providers do not receive your full name, NID number, mobile number, or financial account details.

4.3 Legal and Regulatory Disclosure

hibagee may disclose your personal data to law enforcement agencies, regulatory authorities, or courts if required to do so by applicable law, valid legal process, or in response to a lawful request from a competent authority. In all cases, hibagee will disclose only the minimum data required to comply with the relevant legal obligation, and where legally permitted, will notify you of such disclosure.

4.4 Fraud Prevention and Shared Security Services

In the event of suspected fraud, money laundering, or serious terms violations, hibagee may share limited account data with specialist fraud prevention services or with other platform operators under a shared responsible gaming or anti-fraud framework. Such sharing occurs only where there is a documented, legitimate security purpose and is governed by strict data-sharing agreements.

hibagee retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or legitimate business need. The following retention schedule applies to the main categories of personal data processed by hibagee.

Upon expiry of the applicable retention period, your personal data is securely deleted or anonymised so that it can no longer be associated with your identity. Anonymised, aggregated data (from which all personally identifying information has been irreversibly removed) may be retained indefinitely for statistical and platform improvement purposes.

If you request account closure, hibagee will deactivate your account promptly. However, the personal data and records associated with your account will be retained for the applicable periods listed above before permanent deletion, in fulfilment of our legal and compliance obligations.

hibagee implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The following technical and organisational measures are in place across the hibagee platform.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the hibagee platform is encrypted using industry-standard 256-bit SSL/TLS protocols. The padlock icon in your browser's address bar confirms that your connection is secured.
• Password Hashing: Your hibagee account password is stored exclusively as a cryptographic hash. hibagee staff cannot view your plaintext password under any circumstances. If you forget your password, a reset process is initiated rather than retrieval.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their hibagee accounts. When 2FA is active, a one-time verification code is required at login in addition to the password, significantly reducing the risk of unauthorised access.
• Access Controls: Access to player personal data within the hibagee organisation is restricted on a strict need-to-know basis. Only authorised personnel with a documented operational requirement are granted access, and all internal access is logged and audited.
• Infrastructure Security: The hibagee platform operates on security-hardened server infrastructure with continuous monitoring, intrusion detection systems, and regular independent security assessments.
• Secure Data Storage: KYC documents and sensitive personal data are stored in encrypted, access-controlled repositories. Physical access to server infrastructure is restricted to authorised personnel only.

In the event of a data security incident that poses a risk to your rights and freedoms, hibagee will notify affected players as quickly as practicable, providing clear information about the nature of the incident, the data categories affected, and the steps being taken to contain and remediate the breach. Security notifications will be sent to the email address registered on your hibagee account.

As a registered player on hibagee, you hold a number of rights in relation to the personal data we hold about you. hibagee is committed to honouring these rights promptly and transparently. To exercise any of the rights described in this section, please contact the hibagee data team via email at support@hibagee with a clear description of your request and sufficient identifying information to verify your identity.

7.1 Right of Access

You have the right to request a copy of the personal data that hibagee holds about you. Upon receiving a verified access request, hibagee will provide a structured summary of the categories of data held, the purposes for which it is processed, and the retention period applicable to each category. Access requests will be fulfilled within a reasonable period from receipt of a verified request.

7.2 Right to Rectification

If any personal data that hibagee holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections such as a change of email address or residential address, you may be able to update the information directly from your account settings panel. For corrections to KYC identity data, a formal request accompanied by supporting documentation will be required.

7.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no overriding legal basis for continued processing. Please note that the right to erasure is not absolute: hibagee is required to retain certain categories of data (such as financial transaction records and KYC documents) for defined periods as described in Section 5 of this Policy, and erasure requests cannot override these legal obligations during the applicable retention period.

7.4 Right to Withdraw Marketing Consent

If you have opted in to receive promotional emails or SMS communications from hibagee, you may withdraw that consent at any time by emailing support@hibagee. Withdrawal of marketing consent does not affect the lawfulness of communications sent prior to the withdrawal, and does not affect your ability to continue using your hibagee account. You will continue to receive essential account-related communications (such as transaction confirmations and security alerts) regardless of your marketing preferences.

7.5 Right to Object

You have the right to object to the processing of your personal data where hibagee relies on a legitimate interest as the legal basis for processing. We will assess your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

If you have any questions, concerns, or complaints relating to this Privacy Policy or the way in which hibagee handles your personal data, please contact us using the details below. All privacy-related correspondence is handled by the hibagee data and compliance team.

• Email: support@hibagee (plain text — not a clickable link)
• Live Chat: Available 24/7 via the hibagee platform — select "Privacy / Data Request" from the support menu
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a full written response within a reasonable period of receiving a verified request

8.1 Changes to This Privacy Policy

hibagee reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made to this Policy, the updated version will be published at /privacy-policy with a revised "Last Updated" date at the top of the page. Where changes are significant — for example, introducing a new category of data collection or a new third-party data-sharing arrangement — hibagee will provide notice to registered players via the email address on their account at least 14 days before the changes take effect.

Your continued use of the hibagee platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and request account closure before the revised Policy takes effect.

The current version of this Privacy Policy is always available at /privacy-policy. Previous versions are available upon request by emailing support@hibagee.