hbaze Privacy Policy

1 Overview

hbaze ("we", "our", "us") operates the online betting and casino platform accessible at hbaze.io. This Privacy Policy describes how hbaze collects, processes, stores, and protects the personal data of users ("you", "your", "Player") who access or register an account on the hbaze platform, including through its sports betting, live casino, slot games, crash games, and hbaze Casino lobby.

We take the privacy of our players seriously. As a platform primarily serving users in Bangladesh and across South Asia, hbaze is committed to maintaining transparent, fair, and lawful data practices. This policy is written in plain English to ensure you fully understand how your information is handled before you share it with us.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy. By creating an hbaze account or continuing to use the platform, you confirm that you have read and agree to the terms set out in this Privacy Policy.

2 Data We Collect

hbaze collects personal data through several channels: directly from you when you register and use the platform, automatically when you interact with our systems, and from third-party verification and payment service providers. The categories of personal data we collect are described below.

2.1 Registration Data

When you create an hbaze account via hbaze Login, we collect the following information:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Preferred currency (BDT or INR)
• Username and password (passwords are stored in hashed form — never in plain text)

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering obligations and confirm your age, hbaze may request the following documents during the KYC process:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address (utility bill, bank statement, or official correspondence dated within the last three months)
• Proof of payment method ownership (e.g., a screenshot showing your name on the bKash or Nagad account used for deposits)

2.3 Financial Transaction Data

When you make deposits or withdrawals on hbaze via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer, we collect:

• Transaction reference numbers and amounts in BDT or INR
• Payment method type and partial account identifiers (e.g., the last four digits of a card, or a mobile wallet number)
• Transaction timestamps in Bangladesh Standard Time (UTC+6)
• Deposit and withdrawal history linked to your hbaze account

2.4 Gameplay and Betting Data

hbaze records all activity conducted through your account for operational, dispute resolution, and responsible gaming purposes, including:

• Bet and wager history (sport, market, stake, odds, outcome)
• Casino game session data (game title, stake, result, session duration)
• Bonus and promotion usage records
• Account balance history and transaction logs

2.5 Technical and Device Data

When you access the hbaze platform, we automatically collect certain technical data to ensure platform security and performance:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration, pages visited, and navigation path
• Referring URL and search terms used to reach hbaze.io

2.6 Communications Data

If you contact hbaze through live chat, email, or the support dashboard, we retain records of that correspondence — including the content of your messages, timestamps, and the resolution status of your query.

3 How We Use Your Data

hbaze uses the personal data we collect for clearly defined purposes. We do not use your data for purposes that are incompatible with those listed here without your explicit consent.

3.1 Account Management

We use your registration data to create and maintain your hbaze account, authenticate your identity at each hbaze Login, manage your account preferences, and communicate with you about account-related matters such as security alerts and policy updates.

3.2 Transaction Processing

Financial data is used to process your deposits and withdrawals accurately, detect and prevent fraudulent payment activity, reconcile transaction records, and comply with financial reporting obligations. BDT and INR transactions are processed in partnership with authorised payment processors operating in Bangladesh and South Asia.

3.3 Identity Verification and Compliance

KYC data is used to verify that you are aged 21 or above and to satisfy our obligations under applicable anti-money-laundering (AML) and counter-terrorist-financing (CTF) requirements. Verified identity data is retained securely and used only for compliance purposes.

3.4 Platform Improvement and Analytics

Aggregated and anonymised technical and gameplay data is used to improve the performance, security, and user experience of the hbaze platform. This includes identifying and fixing technical errors, optimising page load speeds, and understanding which game categories — such as cricket betting, slots, and crash games — are most popular among our players in Dhaka, Chittagong, and other cities across Bangladesh.

3.5 Responsible Gaming

Gameplay and session data is used to support our Responsible Gaming programme. This includes monitoring betting patterns that may indicate problem gambling behaviour and enabling automatic intervention tools such as deposit limit alerts and session time notifications.

3.6 Legal Obligations

hbaze may process and disclose your personal data where required to do so by applicable law, court order, regulatory authority request, or as part of a fraud investigation. We will only disclose the minimum data necessary to satisfy each legal obligation.

4 Legal Basis for Processing

hbaze processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as an hbaze account holder — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including AML/CTF regulations, age verification mandates, and financial record-keeping requirements.
• Legitimate interests: Processing carried out to pursue our legitimate business interests in platform security, fraud prevention, and service improvement, provided those interests do not override your fundamental privacy rights.
• Consent: Where we rely on your consent as a legal basis (e.g., for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

5 Data Sharing

hbaze does not sell, rent, or trade your personal data. We share your data only with the categories of third parties listed below, and only to the extent necessary for the stated purpose.

5.1 Payment Processors

To process your BDT and INR transactions, we share relevant financial and identity data with authorised payment service providers, including the operators of bKash, Nagad, Rocket, and Upay integrations, and card payment networks such as Visa and Mastercard. Each payment provider operates under its own privacy policy and is bound by applicable financial regulations.

5.2 KYC and Identity Verification Partners

hbaze works with specialist KYC verification providers to authenticate identity documents submitted during the account verification process. These providers access only the specific document data required for verification and are contractually prohibited from using that data for any other purpose.

5.3 Game and Platform Technology Providers

Third-party game studios whose titles are available in the hbaze Casino lobby — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited session data (such as player identifier, stake, and game result) to operate their game engines correctly and calculate RTP. These providers do not receive your full personal profile.

5.4 Fraud Prevention and Security Services

To protect the integrity of the hbaze platform and all players, we share technical data (including IP addresses and device fingerprints) with fraud prevention and cybersecurity service providers. This data is used exclusively for the purpose of detecting and preventing fraudulent or abusive account activity.

5.5 Legal and Regulatory Authorities

hbaze may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so. We will challenge any request that we believe to be unlawful or disproportionate before complying with it.

6 Cookies & Tracking Technologies

hbaze uses cookies and similar technologies (including local storage and session tokens) to deliver the core functionality of the platform, remember your session preferences, and gather aggregate analytics about platform usage. We do not use cookies for cross-site behavioural advertising.

6.1 Essential Cookies

These cookies are strictly necessary for the hbaze platform to function. They manage your login session, maintain your account preferences (such as selected currency — BDT or INR), and protect against cross-site request forgery attacks. Disabling essential cookies will prevent you from using the hbaze platform.

6.2 Analytics Cookies

hbaze uses privacy-respecting analytics tools to collect anonymised aggregate data about how users navigate the platform — for example, which game categories receive the most visits and where users drop off in the registration flow. This data does not identify you personally and is used solely to improve the platform.

6.3 Preference Cookies

These cookies remember your non-essential preferences, such as your chosen language display settings and recently viewed game categories. They persist across sessions to improve your experience but are not required for core functionality.

6.4 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Note that disabling non-essential cookies may affect the performance of certain hbaze platform features. Detailed instructions for managing cookies are available in the help documentation for all major browsers.

7 International Data Transfers

hbaze operates as an international platform serving players primarily in Bangladesh and South Asia. Your personal data may be transferred to and processed by servers and service providers located outside Bangladesh. In all such cases, hbaze ensures that appropriate safeguards are in place to protect your data during the transfer and at the destination.

These safeguards may include: contractual data protection clauses with receiving parties, ensuring the receiving country provides an adequate level of data protection, or obtaining your explicit consent prior to the transfer where required.

8 Data Retention

hbaze retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by law. The table below summarises our key data retention periods.

When data reaches the end of its retention period, hbaze securely deletes or anonymises it so that it can no longer be linked to any individual player.

9 Security Measures

hbaze applies a layered approach to data security, combining technical controls with organisational policies to protect your personal information against unauthorised access, accidental loss, and unlawful processing.

9.1 Technical Controls

• 256-bit SSL/TLS encryption on all data in transit between your device and hbaze servers.
• Encrypted storage for all sensitive personal data and KYC documents at rest.
• Hashed passwords — hbaze never stores account passwords in plain text. Passwords are processed using a one-way cryptographic hash function.
• Two-factor authentication (2FA) available for all hbaze accounts, providing an additional layer of identity verification at each hbaze Login.
• Automated fraud detection systems that flag unusual account activity and trigger secondary verification steps before large withdrawals are approved.

9.2 Organisational Controls

• Access to personal data is restricted to hbaze personnel who genuinely need it to perform their job functions, on a strict need-to-know basis.
• All hbaze employees and contractors with access to personal data are bound by confidentiality obligations.
• hbaze conducts regular internal security reviews and works with external security specialists to identify and remediate vulnerabilities.

10 Your Rights

As an hbaze player, you have the following rights over your personal data. You may exercise any of these rights by contacting us through the support dashboard after hbaze Login or by emailing [email protected]. hbaze will respond to all data rights requests within 30 days.

• Right of access: You may request a copy of all personal data hbaze holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure ("right to be forgotten"): In certain circumstances, you may request that hbaze delete your personal data. This right is subject to exceptions where retention is required for legal compliance.
• Right to restriction of processing: You may request that hbaze restricts the processing of your data in specific situations — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where technically feasible, you may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to object: You have the right to object to processing of your personal data where hbaze relies on legitimate interests as its legal basis, including profiling for fraud detection.
• Right to withdraw consent: Where hbaze processes your data on the basis of consent (e.g., for optional marketing messages), you may withdraw that consent at any time via your account preferences.

11 Minors & Age Policy

The hbaze platform is strictly intended for adults aged 21 and above. hbaze does not knowingly collect or process personal data from individuals under the age of 21. Our registration process includes a mandatory date-of-birth declaration and is supported by KYC age verification procedures to enforce this restriction.

hbaze supports responsible gambling and encourages parents and guardians in Bangladesh and across South Asia to use parental control software to prevent minors from accessing online betting platforms. For more information, visit our Responsible Gaming page.

12 Third-Party Links

The hbaze platform may contain references to third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) and payment partners (such as bKash, Nagad, Rocket, and Upay). Where your interaction with these providers requires you to be redirected to a third-party environment, their own privacy policies will govern the collection and use of your data in that environment.

hbaze is not responsible for the privacy practices of third-party platforms or payment providers. We encourage you to read the privacy policy of any third-party service you access in connection with your hbaze account.

13 Changes to This Policy

hbaze reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, we will notify registered players by email to their registered address or via an in-platform notification before the updated policy takes effect.

The "Last Updated" date at the top of this page indicates when the current version of the Privacy Policy was published. We encourage you to review this page periodically. Your continued use of the hbaze platform after an updated Privacy Policy is published constitutes your acceptance of the revised terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hbaze handles your personal data, please contact our data support team using the details below. All privacy-related correspondence is handled confidentially and we aim to respond within 48 hours (Bangladesh Standard Time, UTC+6).

Email: [email protected]

Platform: hbaze.io — Privacy & Data Support Team

Operating Hours: 24 hours a day, 7 days a week

Response Time: Within 48 hours (Bangladesh Standard Time, UTC+6)