🔒 Privacy · Data Protection · Transparency

Hebaje Privacy Policy – How We Protect Your Data

Your personal data belongs to you. This privacy policy explains exactly what information hebaje collects when you use the platform, why we collect it, how we use it and what rights you have over it. We've written this in plain language — not legal boilerplate — because we think you deserve to actually understand it.

Last updated: January 2025

Our Privacy Commitments

Six principles that guide how hebaje handles your personal information every single day

SSL Encryption Throughout

Every page on hebaje is served over HTTPS with SSL encryption. Your login credentials, payment details and personal information are encrypted in transit and at rest. We use industry-standard security protocols to keep your data safe from interception.

No Data Selling

Hebaje does not sell, rent or trade your personal data to third parties for marketing purposes. Your information is used only to operate your account, process transactions and improve the platform. That's it — no exceptions and no hidden arrangements.

You Control Your Data

Hebaje gives you meaningful control over your personal data. You can request access to what we hold, ask for corrections, request deletion in certain circumstances and opt out of non-essential communications. Contact our support team to exercise any of these rights.

Minimal Data Collection

Hebaje only collects the data that is genuinely necessary to operate the platform, verify your identity and process your transactions. We don't collect data speculatively or build profiles beyond what is needed for your account and our legal obligations.

Clear Retention Periods

Hebaje retains your data only for as long as it is needed for the purpose it was collected, or as required by applicable law. When data is no longer needed, it is securely deleted or anonymised. We don't hold onto your information indefinitely.

Breach Notification

In the unlikely event of a data breach that affects your personal information, hebaje will notify affected players promptly and take immediate steps to contain the breach and prevent further exposure. We take our responsibility to communicate security incidents seriously.

1 Who We Are

Hebaje is an online gaming and sports betting platform serving players in Bangladesh. When this privacy policy refers to "hebaje", "we", "us" or "our", it means the hebaje platform and the team responsible for operating it. Hebaje acts as the data controller for the personal information collected through the platform, meaning we determine the purposes and means of processing your data.

This privacy policy applies to all users of the hebaje website, mobile app and any related services. It covers data collected when you browse the site, register an account, make a deposit, place a bet, contact support or interact with the platform in any other way.

If you have questions about how hebaje handles your data, contact us at [email protected] or via live chat. We're available 24/7.

2 Data We Collect

Hebaje collects personal data in two ways: information you provide directly when using the platform, and information collected automatically as you interact with the site. Here's a breakdown of what we collect and why:

Data Type Examples How Collected
Identity Data Full name, date of birth, national ID number Registration form, KYC verification
Contact Data Phone number, email address Registration form, support interactions
Financial Data bKash / Nagad / Rocket account number, transaction history Deposit and withdrawal forms
Account Data Username, password (hashed), account balance, betting history Platform activity
Technical Data IP address, device type, browser, operating system Automatic collection via cookies and server logs
Usage Data Pages visited, games played, session duration, click patterns Analytics tools, server logs
Communications Data Live chat transcripts, support emails, feedback submissions Support interactions
Hebaje never stores your full payment credentials. Financial transactions are processed directly through bKash, Nagad and Rocket — we only retain the reference data needed to reconcile your account.

3 How We Use Your Data

Every piece of data hebaje collects is used for a specific, legitimate purpose. We do not use your data in ways that are incompatible with the reason it was originally collected. Here is how we use the information we hold about you:

  • Account management: To create and maintain your hebaje account, verify your identity and keep your account details accurate and up to date.
  • Transaction processing: To process deposits, withdrawals and any bonus credits or adjustments to your account balance.
  • Legal compliance: To meet our obligations under applicable laws, including anti-money laundering (AML) requirements and age verification obligations.
  • Fraud prevention and security: To detect and prevent fraudulent activity, unauthorised account access and abuse of the platform.
  • Customer support: To respond to your queries, resolve disputes and improve the quality of our support service.
  • Platform improvement: To analyse how players use hebaje so we can fix issues, improve features and make the platform better for everyone.
  • Responsible gaming: To monitor for signs of problem gambling and, where appropriate, reach out to players who may need support.
  • Marketing communications: To send you information about promotions and offers on hebaje — only where you have opted in to receive these. You can opt out at any time.
Hebaje will never use your data to make automated decisions that significantly affect you without human review. If an automated system flags your account, a member of the hebaje team will review the case before any action is taken.

4 Legal Basis for Processing

Hebaje processes your personal data on the following legal grounds, depending on the specific purpose of the processing:

  • Contract performance: Processing that is necessary to provide you with the hebaje service you signed up for — including account management, transaction processing and game access.
  • Legal obligation: Processing required to comply with applicable laws, such as identity verification, AML checks and record-keeping requirements.
  • Legitimate interests: Processing carried out for hebaje's legitimate business interests, such as fraud prevention, platform security and service improvement — provided these interests are not overridden by your rights.
  • Consent: Processing based on your explicit consent, such as sending you marketing emails or promotional notifications. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where hebaje relies on legitimate interests as the legal basis for processing, we carry out a balancing assessment to ensure that our interests do not override your fundamental rights and freedoms.

5 Data Sharing

Hebaje does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the specific purpose:

  • Payment processors: bKash, Nagad and Rocket receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
  • Game providers: Licensed game developers such as PG Soft and Pragmatic Play may receive anonymised session data necessary to deliver their games on the hebaje platform. They do not receive your identity or financial data.
  • Identity verification services: Third-party KYC providers may process your identity documents to verify your age and identity as required by law. These providers are bound by strict confidentiality obligations.
  • Analytics providers: Anonymised usage data may be shared with analytics platforms to help us understand how the platform is used and where improvements can be made.
  • Legal authorities: Hebaje will disclose personal data to law enforcement or regulatory authorities where required to do so by law, court order or regulatory obligation.
All third parties who process data on behalf of hebaje are required to handle it securely and in accordance with applicable data protection standards. We do not permit them to use your data for their own purposes.

6 Cookies & Tracking Technologies

Hebaje uses cookies and similar tracking technologies to make the platform work properly and to understand how it is being used. A cookie is a small text file stored on your device when you visit a website. Here is how hebaje uses them:

  • Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies without affecting platform functionality.
  • Analytics cookies: Used to collect anonymised data about how players navigate the platform — which pages are visited most, where users drop off and how long sessions last. This helps us improve the hebaje experience.
  • Preference cookies: Store your settings and preferences, such as language selection and display options, so you don't have to set them again each visit.
  • Marketing cookies: Used only where you have consented, to track the effectiveness of promotional campaigns and deliver relevant offers. You can withdraw consent for marketing cookies at any time via your account settings.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the hebaje platform. For a full list of cookies used on hebaje, contact the support team.

7 Data Security

Hebaje takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction or alteration. These measures include:

  • SSL/TLS encryption for all data transmitted between your device and the hebaje platform.
  • Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial reference data.
  • Access controls that restrict which members of the hebaje team can access personal data, based on the principle of least privilege.
  • Regular security assessments and penetration testing to identify and address vulnerabilities.
  • Monitoring systems that detect unusual activity and trigger alerts for investigation.
  • Staff training on data protection and security best practices.

While hebaje takes every reasonable precaution to protect your data, no system is completely immune to security risks. You also play a role in keeping your account secure — use a strong, unique password for your hebaje account and never share your login credentials with anyone.

If you suspect your hebaje account has been compromised, contact our support team immediately via live chat. We will act quickly to secure your account.

8 Data Retention

Hebaje retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

  • Account data: Retained for the duration of your account and for a period of five years after account closure, in line with standard financial record-keeping requirements.
  • Transaction records: Retained for a minimum of five years from the date of the transaction to comply with AML and financial regulations.
  • Identity verification documents: Retained for five years after account closure or the completion of the business relationship.
  • Support communications: Retained for two years from the date of the interaction, unless the matter relates to an ongoing dispute or legal proceeding.
  • Analytics data: Anonymised analytics data may be retained indefinitely as it cannot be linked back to individual users.
  • Marketing consent records: Retained for as long as you remain opted in, plus a reasonable period after opt-out to demonstrate compliance.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

9 Your Privacy Rights

You have a number of rights in relation to the personal data hebaje holds about you. These rights are outlined below. To exercise any of them, contact the hebaje support team via live chat or email at [email protected].

Right of Access

You can request a copy of the personal data hebaje holds about you. We will provide this within a reasonable timeframe and at no charge for standard requests.

Right to Rectification

If any of the personal data hebaje holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Update basic details directly in your account settings or contact support for more complex corrections.

Right to Erasure

In certain circumstances, you can request that hebaje delete your personal data. This right is not absolute — we may need to retain certain data to comply with legal obligations — but we will delete everything we are not legally required to keep.

Right to Restrict Processing

You can ask hebaje to restrict the processing of your data in certain situations, for example while a dispute about its accuracy is being resolved.

Right to Data Portability

Where processing is based on your consent or a contract, you can request a copy of your data in a structured, machine-readable format so you can transfer it to another service if you wish.

Right to Object

You can object to hebaje processing your data for direct marketing purposes at any time. You can also object to processing based on legitimate interests, though hebaje may be able to demonstrate compelling grounds to continue in some cases.

Hebaje will respond to all data rights requests within 30 days. If a request is complex or we receive a high volume, we may extend this by a further 60 days — but we will always let you know if that is the case.

10 Children's Privacy

Hebaje is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you are not permitted to register on hebaje or use any of its services.

If hebaje becomes aware that personal data has been collected from a person under 18, we will delete that data immediately and close the associated account. If you believe a minor has registered on hebaje, please contact our support team immediately so we can investigate and take appropriate action.

Hebaje uses age verification checks at registration and may request additional proof of age at any point. These checks are in place to protect minors and to comply with our legal obligations as an online gaming platform.

11 Changes to This Privacy Policy

Hebaje may update this privacy policy from time to time to reflect changes in our practices, the services we offer or applicable legal requirements. When we make changes, the updated policy will be published on this page with a revised "last updated" date at the top.

For significant changes that materially affect how we use your personal data, hebaje will notify registered players via email or an in-platform notification before the changes take effect. We encourage you to review this page periodically so you are always aware of how your data is being handled.

Continued use of the hebaje platform after an updated privacy policy has been published constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should stop using the platform and contact support to close your account.

Bookmark this page and check back whenever you want to review how hebaje handles your privacy. We aim to keep this policy clear, current and honest.

12 Contact Us

If you have any questions, concerns or requests relating to this privacy policy or the way hebaje handles your personal data, please get in touch. Our team is available around the clock and will do their best to help you promptly.

  • Live Chat: Available directly on the hebaje platform — the fastest way to reach us, with average response times under two minutes.
  • Email: [email protected] — for detailed data requests or formal privacy enquiries, email is the best channel. We aim to respond within a few hours.
  • Support Page: Visit our Support page for additional contact options and answers to common questions.

When submitting a data rights request, please include your registered phone number or username so we can locate your account quickly and process your request without unnecessary delays.

Your Data Is Safe. Ready to Play?

Now that you know how hebaje protects your privacy, join thousands of Bangladesh players already enjoying fast payouts, fair games and 24/7 support. Register in under two minutes.