hbsje Privacy Policy

This Privacy Policy ("Policy") describes how hbsje ("hbsje", "We", "Us", "Our") collects, uses, stores, discloses, and protects the personal data of individuals ("Player", "User", "You") who access or use the hbsje online casino and sports betting platform at hbsje.org, including all associated mobile-optimised pages, account management interfaces, and customer support channels.

This Policy applies to all personal data processed by hbsje in connection with the operation of its platform, irrespective of the device or connection method used to access the platform. It covers data collected directly from you (for example, during account registration), data collected automatically through your use of the platform (for example, technical log data and session cookies), and data received from third-party service providers (for example, payment processors and identity verification agencies).

By registering an account on hbsje, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Policy should be read in conjunction with hbsje's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

hbsje collects personal data in three principal ways: information you provide directly during registration and account use, information collected automatically through your interaction with the platform, and information received from trusted third-party partners. The categories of personal data we collect are described below.

2.1 — Data You Provide Directly

• Account Registration Data: Full legal name, date of birth, residential address in Bangladesh, email address, and mobile phone number.
• Identity Verification (KYC) Documents: Copies or photographs of your National Identity Card (NID), passport, or driving licence submitted during the Know Your Customer verification process.
• Payment Information: Mobile wallet numbers associated with your bKash, Nagad, Rocket, or Upay accounts; bank account details for players using BRAC Bank, City Bank, Islami Bank, Sonali Bank, or Dutch-Bangla Bank transfers; and card details (handled exclusively by our payment processor — hbsje does not store full card numbers).
• Support Communications: The content of any messages, emails, live chat transcripts, or complaints submitted to the hbsje support team.
• Responsible Gaming Declarations: Any self-exclusion requests, deposit limit preferences, loss limit settings, or time-out requests you submit through your account dashboard or via support.

2.2 — Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system version, browser type and version, screen resolution, and device identifiers.
• Usage & Behavioural Data: Pages visited, time spent on each page, games launched, bets placed, wager amounts in Bangladeshi Taka (৳), session duration, and navigation paths through the platform.
• Log Data: Server access logs recording timestamps, request types, and response codes for all interactions between your device and hbsje's servers.
• Cookie & Tracking Data: Data collected via first-party cookies, session storage tokens, and analytics tracking pixels. See Section 5 (Cookies) for full details.

2.3 — Data Received from Third Parties

• Payment Processor Confirmations: Transaction reference numbers, payment status updates, and flagged transaction alerts received from bKash, Nagad, Rocket, Upay, and card payment processors.
• Identity Verification Agencies: Verification status, document authenticity results, and age-confirmation outcomes from third-party KYC service providers.
• Fraud Prevention Partners: Risk scores and fraud indicator data used to protect the platform and its players from financial crime.

hbsje processes your personal data only for lawful, specified, and explicit purposes. The table below sets out the primary purposes for which we use your data and the legal basis on which each processing activity rests.

hbsje does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight. Where automated processes are used (for example, initial fraud scoring), a human review is applied before any account-level action is taken.

hbsje does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

4.1 — Payment Processors

To facilitate deposits and withdrawals, hbsje shares necessary transaction data with our certified payment processing partners, including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and Visa/Mastercard processing networks. These partners receive only the data required to authorise, route, and confirm each transaction. They are contractually bound to process this data solely for payment execution purposes.

4.2 — Identity Verification Providers

KYC document data (NID scans, passport photographs, and verification outcomes) is shared with hbsje's third-party identity verification provider for the purpose of confirming player identity and age. This provider is bound by strict data processing agreements and is not permitted to use your documents for any purpose other than identity verification on behalf of hbsje.

4.3 — Game Studios & Technology Partners

Game studios whose titles are available on hbsje — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised or pseudonymised session data for the purposes of game performance monitoring, RTP auditing, and technical fault investigation. These partners do not receive personally identifiable registration data unless a specific game dispute requires it.

4.4 — Legal & Regulatory Disclosure

hbsje may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are compelled to do so by applicable law. In such cases, hbsje will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify the affected player of the disclosure.

4.5 — Business Transfers

In the event that hbsje undergoes a corporate restructuring, merger, acquisition, or sale of assets, player personal data may be transferred to the successor entity as part of that transaction. Affected players will be notified in advance of any such transfer and given the opportunity to close their accounts before the transfer takes effect if they do not consent to their data being held by the new entity.

hbsje uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and analyse aggregate usage patterns. A cookie is a small text file placed on your device by our web server when you visit hbsje.org. The following categories of cookies are used on the hbsje platform:

Strictly necessary cookies cannot be disabled as they are essential for the platform to function correctly. Functional, analytics, and marketing cookies can be managed through your browser settings. Most modern browsers allow you to block or delete cookies via the browser's privacy or settings menu. Please note that disabling functional cookies may impair certain features of the hbsje platform, such as saved game preferences or automatic session restoration.

hbsje does not use third-party social media tracking pixels from Facebook, Google Ads, Twitter, or similar platforms on any page that requires player authentication. Analytics data collected on the platform is anonymised before being processed at the aggregate level.

hbsje retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual. Where data is retained beyond the active account lifetime for legal compliance reasons, access to that data is restricted to authorised personnel only.

hbsje implements a layered, defence-in-depth security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to, the following:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and hbsje's servers is encrypted in transit using industry-standard TLS 1.3 protocols. HTTPS is enforced across all pages of the platform.
• Encryption at Rest: Personal data stored in hbsje's database infrastructure — including account registration data, KYC documents, and transaction records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to systems containing personal data is restricted to authorised hbsje personnel on a strict need-to-know basis. Multi-factor authentication (MFA) is required for all internal staff accounts with database access.
• Penetration Testing: hbsje's platform undergoes regular security audits and penetration testing conducted by qualified third-party security specialists. Identified vulnerabilities are remediated according to a risk-prioritised patching schedule.
• Intrusion Detection: Automated intrusion detection and prevention systems (IDS/IPS) monitor all incoming and outgoing network traffic for suspicious patterns, brute-force attempts, and known attack signatures.
• Data Minimisation: hbsje does not log or store payment credentials such as full bKash PINs, card CVV numbers, or online banking passwords at any point in the transaction flow.

While hbsje takes all reasonable and technically appropriate measures to protect your personal data, no digital system can guarantee absolute security. In the event of a data breach that poses a high risk to your rights and freedoms, hbsje will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

As a player whose personal data is held and processed by hbsje, you have the following privacy rights. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request" and include your registered account email address and a description of the right you wish to exercise.

Right of Access

You have the right to request a copy of the personal data hbsje holds about you, including the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared. hbsje will respond to access requests within 30 days of receipt.

Right to Rectification

If any personal data held by hbsje about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Account holders may update certain data (such as email address and phone number) directly via their account settings dashboard. For data that cannot be self-edited (such as legal name or date of birth), submit a rectification request to support with supporting documentation.

Right to Erasure

You have the right to request that hbsje delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that hbsje is required by law to retain certain categories of data (particularly KYC documents and transaction records) for defined periods after account closure, and erasure requests for such data will be declined with an explanation of the applicable legal obligation.

Right to Restrict Processing

You have the right to request that hbsje restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed. During a restriction period, hbsje will continue to store your data but will not actively process it for purposes beyond storage.

Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider.

Right to Object to Marketing

You have the absolute right to object to your personal data being used for direct marketing purposes at any time. Marketing communications from hbsje can be stopped by contacting [email protected] with a written opt-out request. Your objection will be processed within 5 business days.

hbsje is strictly an adults-only platform. No person under the age of 18 is permitted to register an account, deposit funds, or participate in any game or betting market available on the platform. hbsje does not knowingly collect personal data from individuals under the age of 18.

Where hbsje discovers or reasonably suspects that personal data belonging to an individual under 18 has been collected — whether through a false declaration of age at registration or through any other means — that data will be deleted immediately and the associated account permanently closed. Any deposits made during the period of under-age use will be returned to the originating payment method; no winnings generated during that period will be paid out.

Parents and guardians who believe that a minor in their care may have registered on hbsje are encouraged to contact our support team at [email protected] immediately so that the account can be investigated and closed without delay.

hbsje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will notify registered players by email to the address associated with their account and by displaying a prominent notice on the platform for a minimum of 7 days before the changes take effect.

The version number and effective date at the top of this page reflect the most recent revision. Players are encouraged to review this Policy periodically to stay informed about how hbsje protects their personal data. Continued use of the hbsje platform after the effective date of any updated Policy constitutes acceptance of the revised terms.

Archived versions of previous Privacy Policy editions are available upon written request to [email protected]. hbsje maintains a full version history of this Policy for internal compliance purposes.