Privacy Policy

Habajee is an online real money gaming platform operating at habajee.app, designed specifically for players in Bangladesh. When this privacy policy refers to "Habajee", "we", "us", or "our", it means the Habajee platform and the team responsible for operating it.

As the operator of this platform, Habajee acts as the data controller for all personal data collected through habajee.app. This means we determine the purposes and means of processing your personal data, and we are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about this privacy policy or about how Habajee handles your personal data, you can reach us at any time at [email protected]. We are committed to responding to all privacy-related enquiries within 30 days.

Habajee collects personal data in two broad categories: data you provide directly, and data we collect automatically when you use the platform. Here is a clear breakdown of both.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law or where you voluntarily provide such information in the context of a responsible gaming self-exclusion request.

Habajee collects your personal data through the following channels:

• Direct interactions — When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated technologies — When you visit habajee.app, our servers automatically log your IP address, device information, and browsing behaviour. We also use cookies and similar tracking technologies, which are described in Section 8.
• Third-party payment providers — When you make a payment via bKash, Nagad, or Rocket, those providers share a transaction confirmation with us. They do not share your PIN, password, or full account credentials.
• Identity verification services — For KYC purposes, we may use third-party identity verification tools that cross-reference the documents you submit against official databases.

We do not purchase personal data from data brokers or any other third-party data sources. Every piece of data we hold about you comes from one of the channels listed above.

Habajee uses your personal data for specific, clearly defined purposes. We do not use your data for anything beyond what is described in this privacy policy without first obtaining your consent.

• Account management — To create and maintain your Habajee account, verify your identity, and process your login credentials securely.
• Payment processing — To process deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate transaction records.
• Game delivery — To provide access to all games on the platform, record game results, and maintain the integrity of the provably fair system.
• Customer support — To respond to your enquiries, resolve disputes, and provide assistance through live chat and email.
• Fraud prevention and security — To detect and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct described in our Terms and Conditions.
• Responsible gaming — To monitor gaming patterns for signs of problem gambling and to enforce self-exclusion requests and deposit limits.
• Legal compliance — To comply with applicable laws, regulations, and lawful requests from regulatory or law enforcement authorities.
• Platform improvement — To analyse usage patterns and improve the performance, design, and features of habajee.app.
• Marketing communications — To send you promotional offers and updates about Habajee, where you have opted in to receive such communications. You can opt out at any time.

Every time Habajee processes your personal data, we do so on one of the following legal grounds:

• Contract performance — Processing is necessary to fulfil our obligations to you under the Habajee Terms and Conditions, such as operating your account and processing payments.
• Legal obligation — Processing is required to comply with applicable laws, including anti-money laundering regulations and identity verification requirements.
• Legitimate interests — Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your rights.
• Consent — For marketing communications and non-essential cookies, we rely on your explicit consent. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Habajee does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually required to handle it securely and in accordance with this privacy policy.

• Payment providers — bKash, Nagad, and Rocket receive the minimum data necessary to process your transactions. They operate under their own privacy policies and are independently regulated.
• Identity verification services — Third-party KYC providers receive the identity documents you submit for verification purposes only. They do not retain your documents beyond the verification process.
• Game software providers — The studios that supply our games may receive anonymised gameplay data for the purpose of game performance monitoring and fairness auditing. They do not receive your name, contact details, or financial data.
• Legal and regulatory authorities — We may disclose your data to law enforcement, regulatory bodies, or courts where required by law or in response to a valid legal request.
• Business transfers — In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. You will be notified before any such transfer takes effect.

All third parties with whom we share data are required to implement appropriate technical and organisational security measures and to use your data only for the specific purpose for which it was shared.

Habajee takes the security of your financial data extremely seriously. Here is exactly how payment data is handled on our platform:

• When you initiate a deposit or withdrawal, you are redirected to or interact directly with your chosen mobile banking provider — bKash, Nagad, or Rocket.
• Your mobile banking PIN, password, and full account credentials are entered directly into the provider's interface and are never transmitted to or stored on Habajee's servers.
• Habajee receives only a transaction confirmation from the payment provider, which includes the transaction ID, amount, and status. This is the minimum data required to credit your account or process your withdrawal.
• Transaction records are retained for a minimum of five years to comply with financial record-keeping obligations.
• All financial data stored by Habajee is encrypted at rest using AES-256 encryption.

Habajee uses cookies and similar technologies to make the platform work correctly and to improve your experience. A cookie is a small text file stored on your device when you visit a website. Here is how we use them:

• Essential cookies — Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies without stopping use of the platform.
• Analytics cookies — Help us understand how players use habajee.app, which pages are most visited, and where users encounter problems. This data is aggregated and anonymised. We use this to improve the platform.
• Preference cookies — Remember your settings, such as language preference and display options, so you do not have to reconfigure them on each visit.
• Marketing cookies — Used only where you have given explicit consent, to show you relevant promotions and track the effectiveness of our marketing campaigns.

You can manage your cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect the functionality of habajee.app. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

Habajee retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:

Once the applicable retention period has expired, your data is securely deleted or anonymised so that it can no longer be linked to you. Anonymised data may be retained indefinitely for statistical and analytical purposes.

As a Habajee player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us at [email protected] with the subject line "Data Rights Request".

We will respond to all data rights requests within 30 days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it. We will never charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive.

Habajee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for all sensitive data stored in our databases.
• Two-factor authentication (2FA) available for all player accounts.
• Regular security audits and penetration testing by independent third-party security firms.
• Strict access controls ensuring that only authorised Habajee staff can access personal data, and only to the extent necessary for their role.
• Automated monitoring systems that detect and alert on unusual access patterns or potential security incidents in real time.
• Secure data centres with physical access controls, redundant power supplies, and 24/7 monitoring.

Despite these measures, no system is completely immune to security risks. In the unlikely event of a data breach that poses a risk to your rights and freedoms, Habajee will notify you and the relevant authorities as required by law, without undue delay.

You also play an important role in keeping your account secure. Use a strong, unique password for your Habajee account, enable 2FA, and never share your login credentials with anyone. If you suspect your account has been compromised, contact us immediately at [email protected].

Habajee is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes an age declaration, and we conduct age verification checks as part of our KYC process.

If we discover that we have inadvertently collected personal data from a minor, we will delete that data immediately and close the associated account. If you believe a minor has registered on Habajee, please contact us at [email protected] so we can investigate and take appropriate action.

Habajee may update this privacy policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players by email and display a prominent notice on habajee.app for at least 14 days before the changes take effect.

The date at the top of this page shows when the policy was last updated. We encourage you to review this policy periodically. Continued use of habajee.app after the effective date of any changes constitutes your acknowledgement of the updated policy.

If you disagree with any changes to this privacy policy, you should stop using the platform and contact us to close your account. Any data collected before the change will continue to be handled in accordance with the version of the policy that was in effect at the time of collection, unless you consent to the new terms.

If you have any questions, concerns, or requests relating to this Habajee privacy policy or to the way we handle your personal data, please get in touch. We take all privacy enquiries seriously and will respond promptly.

• Email: [email protected]
• Subject line for data requests: "Data Rights Request"
• Live Chat: Available 24/7 from within your Habajee account
• Response time: Within 30 days for all privacy-related requests

For information about our gameplay rules and account policies, please see our Terms and Conditions. For tools to help you manage your gaming habits, visit our Responsible Gaming page.