habaje Privacy Policy

habaje is committed to handling your personal information responsibly, transparently, and in accordance with fair data practices. We collect only the data that is genuinely necessary to deliver our services, process transactions in Bangladeshi Taka (BDT), and meet our obligations with respect to responsible gaming and fraud prevention. We do not sell your personal data to third parties for marketing purposes.

This Policy applies to all data collected via habaje.bio, including data submitted during account registration, during deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and during your use of casino games, sportsbook markets, and customer support channels. Please read this Policy carefully alongside our Terms & Conditions and Responsible Gaming page.

5.1 Account Management

We use your identity and contact data to create and manage your habaje account, authenticate your login sessions via OTP, and communicate important account updates such as password changes, withdrawal confirmations, and security alerts. Your registered Bangladeshi mobile number is the primary identifier for your account.

5.2 Payment Processing

Your financial data — specifically the mobile wallet references associated with bKash, Nagad, Rocket, or Upay — is used exclusively to process your deposits and withdrawals in BDT. habaje does not store full payment credentials on its own servers. Payment data is transmitted via encrypted channels directly to the relevant payment provider. habaje retains transaction records as required for financial record-keeping and fraud prevention purposes.

5.3 Age Verification and Responsible Gaming

habaje uses identity data, including your date of birth and NID number, to verify that you meet the minimum age requirement of 21 years. 21+ We also use your usage data — including session duration, betting frequency, and deposit patterns — to monitor for signs of problem gambling and to apply responsible gaming safeguards where necessary. Players who request self-exclusion or deposit limits are flagged in our system to prevent re-engagement marketing from reaching them.

5.4 Security and Fraud Prevention

Technical data including IP addresses, device fingerprints, and session logs are analysed by habaje's automated security systems to detect and prevent unauthorised account access, bonus abuse, collusion, money laundering, and other prohibited activities described in our Terms & Conditions. Where suspicious activity is detected, habaje may suspend an account pending manual review.

5.5 Service Improvement

Aggregated and anonymised usage data helps habaje understand which games and sports markets are most popular among our Bangladeshi players, identify platform performance issues, and prioritise product improvements. This data does not identify you personally and is used only at an aggregate level.

5.6 Legal and Regulatory Compliance

habaje may process and retain your personal data where necessary to comply with applicable legal obligations, including responding to lawful requests from competent authorities, enforcing our Terms & Conditions, and resolving disputes. Where we are required by law to disclose personal data, we will do so only to the extent required and will notify you where permitted to do so.

habaje does not sell, rent, or trade your personal data with third parties for their own marketing purposes. We share personal data only in the limited circumstances described below.

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit habaje.bio. They allow the platform to remember your session state, language preferences, and certain account settings so that you do not have to re-enter them on every visit.

7.2 Types of Cookies We Use

Essential cookies are necessary for the habaje platform to function correctly. They manage your login session, keep your account secure, and ensure that transactions are processed accurately. These cookies cannot be disabled without impairing platform functionality.

Analytics cookies help us understand how players navigate habaje.bio — which pages are visited most, how long sessions last, and where players drop off. This data is aggregated and anonymised. We use this information solely to improve the habaje platform for Bangladeshi players.

Preference cookies remember settings you have applied, such as notification preferences and responsible gaming limits, so that they persist across sessions.

7.3 Managing Cookies

You can manage or delete cookies through your mobile browser settings at any time. Please note that disabling essential cookies will prevent you from logging in to your habaje account and using core platform features. Disabling analytics cookies will not affect your ability to use habaje.

habaje retains your personal data for as long as your account remains active and for a further period as necessary to fulfil the purposes described in this Policy. The specific retention periods we apply are as follows:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five years after account closure, to meet financial record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in line with standard financial compliance practices.
• Communications data: Retained for two years from the date of the last communication, or longer if the communication relates to an unresolved dispute.
• Technical and usage data: Retained for up to 12 months on a rolling basis, after which it is anonymised or deleted.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded players.

When personal data is no longer needed for any of the above purposes, habaje will securely delete or anonymise it in accordance with industry-standard data disposal practices.

habaje takes data security seriously. We implement a layered security approach to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and habaje.bio.
• Encrypted storage for sensitive fields including passwords, NID references, and payment account identifiers. Passwords are hashed using industry-standard algorithms and are never stored in plaintext.
• OTP-based login authentication delivered to your registered Bangladeshi mobile number, providing a second layer of account security beyond your password.
• Automated fraud and anomaly detection systems that monitor account activity in real time and flag suspicious patterns for manual review.
• Access controls that restrict habaje staff access to personal data on a strict need-to-know basis, with all access logged and audited.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that affects your personal data, habaje will notify you promptly via your registered mobile number and take all reasonable steps to contain and remediate the breach.

As a habaje player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request":

The habaje platform is strictly intended for adults aged 21 and above. 21+ habaje does not knowingly collect personal data from any person under the age of 21. If you believe that a minor has registered an account on habaje.bio or has submitted personal data to us, please contact [email protected] immediately. We will investigate and, where confirmed, promptly close the account and delete all associated personal data.

We encourage parents and guardians in Bangladesh to make use of device-level parental controls and internet filtering tools to prevent minors from accessing online gambling platforms.

habaje may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes, we will notify registered players via their registered mobile number and post a prominent notice on habaje.bio. The effective date at the top of this Policy will be updated accordingly.

Your continued use of the habaje platform following notification of any changes constitutes your acceptance of the revised Policy. We recommend reviewing this Policy periodically, particularly before making a deposit or providing additional personal information.

For responsible gaming concerns including self-exclusion requests and deposit limit changes, please contact us using the same email address and mark your message clearly. Our responsible gaming team operates 24 hours a day, 7 days a week, including all Bangladeshi public holidays.