hijbaji Privacy Policy

hijbaji collects personal data from players in order to operate its betting and casino platform, verify player identities, process payments, and comply with applicable legal obligations. We collect only the data that is necessary for these purposes. The categories of personal data we collect are set out below.

hijbaji does not collect sensitive personal data such as biometric data, health information, or racial or ethnic origin beyond what may appear incidentally in identity documents submitted for KYC verification. Such incidental data is not processed for any purpose other than identity confirmation.

hijbaji processes your personal data only where a lawful basis exists for doing so. The primary lawful bases we rely upon are: performance of a contract (operating your player account), compliance with a legal obligation, and our legitimate interests in running a secure and well-functioning platform. Where we rely on consent — for example, for optional marketing communications — you may withdraw that consent at any time.

The specific purposes for which we use each category of data are as follows:

• Account creation and management: Identity and contact data are used to register your hijbaji account, verify your identity, and keep your account profile accurate and up to date.
• Payment processing: Financial and transaction data are used to process deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer channels — all denominated in Bangladeshi Taka (৳ BDT).
• Age and identity verification: We are obligated to verify that all players are aged 18 or over. Identity data is used exclusively for this purpose and for ongoing anti-fraud checks.
• Platform personalisation: Usage data allows us to tailor your experience on hijbaji — for example, surfacing cricket markets relevant to BPL or IPL fixtures, or recommending slot titles based on your play history.
• Customer support: Communication data is used by our support team to respond to your queries, resolve disputes, and maintain a record of interactions for quality assurance.
• Security and fraud prevention: IP address, device data, and transaction patterns are analysed to detect and prevent unauthorised access, bonus abuse, money laundering, and other prohibited conduct.
• Legal and regulatory compliance: We may be required to share data with law enforcement or regulatory authorities in response to a lawful request. In such cases, disclosure is limited to what is strictly necessary.
• Marketing communications (opt-in only): If you have explicitly consented, we may send you promotional emails or SMS messages about hijbaji offers, new game releases, and cricket betting specials. You can unsubscribe at any time via the link in any such communication or by contacting support.

hijbaji does not sell or rent your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment service providers: When you make a deposit or withdrawal, relevant financial data is transmitted to the applicable payment processor — bKash, Nagad, Rocket, Upay, or our card-processing partner. Each provider operates under its own privacy policy and data-protection obligations.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier in order to deliver their game content. They do not receive your full name, NID, or payment details.
• Identity verification services: Where hijbaji uses a third-party KYC provider to verify identity documents, that provider receives only the document images and data points necessary to complete the verification check.
• Analytics and platform infrastructure: We use reputable cloud hosting and analytics partners to operate hijbaji's servers and measure platform performance. These partners act as data processors under contractual obligations and do not use your data for their own purposes.
• Legal and regulatory authorities: We may disclose personal data to the police, courts, or other public authorities where required by applicable law or in response to a valid legal process.

All third-party data processors engaged by hijbaji are bound by data-processing agreements that require them to maintain appropriate technical and organisational security measures and to process your data only on hijbaji's documented instructions.

hijbaji uses cookies and similar technologies (including local storage and session storage) to operate the platform efficiently and improve your experience. Cookies are small text files placed on your device when you visit hijbaji.net. The table below describes the categories of cookies we use.

hijbaji does not deploy third-party behavioural advertising cookies that track your activity across websites outside of hijbaji.net. You can manage cookie preferences through your browser settings; however, disabling essential cookies will impair your ability to log in and use the platform.

hijbaji retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable law — whichever period is the longer. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your player account being open, plus a minimum of five years following account closure to satisfy financial record-keeping obligations.
• KYC and identity documents: Retained for five years after the date of verification or after account closure, whichever is later, in line with anti-money laundering compliance requirements.
• Transaction records: Deposit, withdrawal, and bet history records are retained for a minimum of five years following each transaction to support dispute resolution and audit requirements.
• Communication and support records: Live chat transcripts and support email threads are retained for two years from the date of the interaction.
• Marketing consent records: Records of your consent to or withdrawal from marketing communications are retained for five years from the date of the last consent action.
• Usage and analytics data: Anonymised and aggregated analytics data may be retained indefinitely. Personally identifiable usage logs are deleted or anonymised within 13 months of collection.

When a retention period expires, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately practicable — for example, where data is held in encrypted backup archives — the data is isolated from active processing and scheduled for deletion at the next available backup cycle.

As a player on hijbaji, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or by emailing [email protected] from your registered email address. We will respond within 30 days of receiving your request.

• Right of access: You may request a copy of the personal data hijbaji holds about you, along with an explanation of how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For most contact-data updates, you can make changes directly within your account profile.
• Right to erasure: In certain circumstances — for example, where your data is no longer necessary for the purpose for which it was collected — you may request that hijbaji delete your personal data. This right is subject to any overriding legal obligation to retain the data.
• Right to restrict processing: You may request that hijbaji temporarily halt the processing of your personal data while a dispute about accuracy or lawfulness is being resolved.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you may request that your data be provided to you in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where hijbaji processes your data based on consent — most commonly for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.
• Right to object: You may object to hijbaji processing your data on the basis of legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

hijbaji takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, loss, misuse, alteration, or disclosure.

• Encryption in transit: All data exchanged between your browser or app and hijbaji's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser's address bar confirms this connection is active.
• Encryption at rest: Sensitive data fields — including payment details and identity document images — are encrypted at the database level using AES-256 encryption.
• Access controls: Access to personal data within hijbaji's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum access rights required to perform their duties, and all access events are logged.
• Two-factor authentication: hijbaji offers two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA to add an additional layer of protection beyond your password.
• Penetration testing and vulnerability management: Our platform is subject to regular security assessments. Any identified vulnerabilities are triaged and remediated according to their severity classification.
• Incident response: hijbaji maintains a documented data-breach response plan. In the event of a breach that is likely to result in risk to affected players, we will notify impacted individuals without undue delay.

While hijbaji employs robust security practices, no system connected to the internet can guarantee absolute security. You play an important role in keeping your account safe: use a strong, unique password, enable 2FA, and never share your login credentials with anyone.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way hijbaji handles your personal data, please contact our support team using the details below. We aim to acknowledge all privacy-related enquiries within two business days and to provide a full response within 30 calendar days.

• Email: [email protected] (plain text — not a clickable link)
• Live chat: Available 24/7 from your hijbaji account dashboard
• Support hours: Available 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

When submitting a privacy-related request, please include your registered email address and a brief description of your query or request so that our team can route it to the appropriate personnel without delay.

hijbaji reserves the right to update this Privacy Policy at any time. The "Effective Date" displayed at the top of this page reflects the date on which the current version came into force. We encourage you to revisit this page periodically. Material changes will be communicated to registered players via the email address associated with their account at least 7 days before the updated policy takes effect. Continued use of hijbaji following the effective date of any update constitutes acceptance of the revised Privacy Policy.