habajer Privacy Policy

1. Information We Collect

habajer collects personal data to provide a secure, personalised, and legally compliant gaming experience for all Bangladeshi players. The types of information we collect fall into several categories depending on how you interact with the platform.

1.1 Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, contact support, or participate in a promotion, you may provide us with information such as:

• Full legal name and date of birth
• Residential address (including district and division within Bangladesh)
• Email address and mobile phone number
• National ID card number, passport number, or driving licence number (for KYC verification)
• Payment method details, including bKash wallet number, Nagad number, Rocket number, Upay ID, or bank account information for supported institutions such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank
• Username and password (password is stored in encrypted form only)
• Any communications you send to habajer's support team

1.2 Information Collected Automatically

When you access habajer, our systems automatically collect certain technical and behavioural data to ensure platform security, improve user experience, and detect fraud. This includes:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent on each section, and navigation path through the platform
• Game sessions played, wagers placed, deposit and withdrawal activity
• Login timestamps and session duration
• Referral source (how you arrived at habajer)

1.3 Information From Third Parties

habajer may receive additional information about you from trusted third parties in limited circumstances, such as:

• Identity verification partners used during the KYC process
• Payment processors who confirm the status of deposits or withdrawals made via bKash, Nagad, or banking partners
• Fraud detection and anti-money laundering (AML) screening services
• Responsible gaming third-party databases, including self-exclusion registries

2. How We Use Your Data

habajer uses personal data only for legitimate, clearly defined purposes. We do not sell your personal data to third parties. The primary purposes for which we process your information are as follows:

Purpose	Legal Basis
Account registration and ongoing account management	Contractual necessity
Processing deposits and withdrawals via bKash, Nagad, Rocket, and banking partners	Contractual necessity
KYC identity and age verification (18+ requirement)	Legal obligation
Anti-money laundering (AML) screening and fraud prevention	Legal obligation & legitimate interest
Customer support communications	Contractual necessity
Sending promotional offers and bonus notifications (where opted in)	Consent
Platform analytics and service improvement	Legitimate interest
Responsible gaming monitoring and intervention	Legal obligation & legitimate interest
Compliance with applicable laws and regulatory obligations	Legal obligation

Where habajer relies on your consent as the legal basis for processing (for example, marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

2.1 Marketing Communications

If you have opted in to receive promotional communications from habajer, we may contact you by email or SMS to inform you of new games, seasonal offers (such as Eid or BPL promotions), bonus credits, and platform updates. You may opt out of marketing communications at any time by contacting our support team at [email protected]. Opting out of marketing does not affect your ability to use the habajer platform or receive transactional service communications.

2.2 Automated Decision-Making

habajer uses automated processes to assist with fraud detection, bonus eligibility assessment, and responsible gaming monitoring. These processes may result in automated actions such as temporary account holds pending manual review. Where a significant decision is made solely by automated means, you have the right to request human review of that decision by contacting our support team.

3. Data Sharing & Disclosure

habajer does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited and controlled circumstances:

3.1 Service Providers

habajer works with a carefully selected group of third-party service providers who assist us in operating the platform. These providers are contractually obligated to process your data only on habajer's instructions and to maintain appropriate security measures. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, and banking institutions)
• Identity verification and KYC service providers
• Fraud prevention and AML screening services
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others)
• Cloud hosting and infrastructure providers
• Customer support software providers
• Analytics and platform performance monitoring services

3.2 Legal & Regulatory Disclosure

habajer may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, terrorist financing, or harm to persons.

3.3 Business Transfers

In the event that habajer undergoes a merger, acquisition, or sale of all or part of its business, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, habajer will ensure that the receiving entity is bound by privacy obligations consistent with this Policy, and we will notify affected users of any material change in data controller.

3.4 No Sale of Data

habajer does not and will not sell personal data to data brokers, advertisers, or other commercial third parties. Your data is used solely to deliver and improve the habajer service and to meet our legal obligations.

4. Cookies & Tracking

habajer uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to understand how users interact with the site. A cookie is a small text file stored on your device when you visit a website.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the habajer platform to function. They enable core features such as account login, session management, and payment security. These cookies cannot be disabled without preventing the platform from working correctly.
• Performance & Analytics Cookies: These cookies collect anonymised data about how visitors use habajer — which pages are visited most frequently, how long users spend on each section, and where errors occur. This data helps us continuously improve the platform experience.
• Functionality Cookies: These cookies remember your preferences, such as your preferred language settings, regional display options, and notification choices, so that you do not have to reconfigure them each time you visit.
• Targeting & Marketing Cookies: Where you have consented, these cookies may be used to deliver relevant promotional content within the habajer platform. habajer does not use third-party advertising networks that place cookies on behalf of external advertisers.

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to use habajer. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

5. Data Security

habajer employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes the following safeguards:

• SSL/TLS Encryption: All data transmitted between your device and habajer's servers is encrypted using Secure Sockets Layer (SSL) technology. The padlock icon in your browser address bar confirms that your connection is secure.
• Password Hashing: Account passwords are never stored in plain text. habajer uses strong cryptographic hashing algorithms so that even in the unlikely event of a data breach, your password remains protected.
• Two-Factor Authentication: habajer offers optional OTP-based two-factor authentication for account login, adding an additional layer of security beyond your password.
• Access Controls: Access to personal data within habajer's systems is restricted to authorised personnel who require it to perform their job responsibilities. All staff with data access are bound by confidentiality obligations.
• Regular Security Audits: habajer conducts periodic security reviews and vulnerability assessments to identify and address potential risks to platform and data integrity.
• Fraud Monitoring: Our automated fraud detection systems monitor account activity in real time for unusual patterns that may indicate unauthorised access or fraudulent behaviour.

Despite these measures, no online platform can guarantee absolute security. If you suspect that your habajer account has been compromised, please contact our support team at [email protected] immediately so that we can take protective action.

6. Data Retention

habajer retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes. The specific retention periods that apply to different categories of data are outlined below.

• Account & Registration Data: Retained for the duration of your account's active status and for a period after account closure as required by applicable record-keeping obligations.
• Transaction Records: Deposit, withdrawal, wager, and payment records are retained for a minimum period as required under applicable financial record-keeping and AML regulations.
• KYC & Identity Documents: Identity verification documents are retained for the period required under applicable anti-money laundering legislation from the date of the last transaction or account closure, whichever is later.
• Customer Support Communications: Records of support interactions are retained for a reasonable period to enable quality assurance, dispute resolution, and continuity of service.
• Marketing Preferences: Records of consent and opt-out preferences are retained for the period necessary to demonstrate compliance with consent-based marketing obligations.
• Technical & Log Data: Server logs and security event data are retained for a shorter period consistent with their purpose of detecting and investigating security incidents.

When data is no longer required for the purposes for which it was collected, habajer will securely delete or anonymise it in accordance with our internal data lifecycle procedures.

7. Your Rights

As a habajer player, you hold a number of rights in relation to the personal data we hold about you. habajer is committed to honouring these rights promptly and transparently. Your rights include the following:

• Right of Access: You have the right to request a copy of the personal data habajer holds about you. We will provide this within a reasonable timeframe upon verification of your identity.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain information directly through your habajer account settings.
• Right to Erasure: In certain circumstances, you have the right to request that habajer delete your personal data. This right is subject to overriding legal and regulatory obligations — for example, transaction records that must be retained under AML legislation cannot be deleted on request.
• Right to Restrict Processing: You may request that habajer restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of data we hold, while we verify the accuracy.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interest as the legal basis, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our data team at [email protected]. We will acknowledge your request promptly and respond within a reasonable timeframe. We may need to verify your identity before processing certain requests to protect against unauthorised access to your data.

8. Contact & Updates

habajer is the data controller responsible for the personal data collected and processed through the platform. If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data, please contact our team using the details below.

Contact: [email protected] — our support team is available 24 hours a day, 7 days a week, including weekends and public holidays such as Eid and Victory Day.

habajer reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. Where material changes are made, we will post a prominent notice on the habajer platform and update the effective date at the top of this document. We encourage you to review this Policy periodically. Continued use of habajer after the updated Policy has been posted constitutes your acceptance of the revised terms.

This Privacy Policy was last reviewed and updated on 1 January 2026. The version published on habajer at any given time is the governing version. All versions are maintained in English and the English text takes precedence in all cases.