hbsje Privacy Policy

hbsje collects personal data from players through several distinct channels: directly from you when you register or interact with the platform, automatically through your use of the site, and from third parties such as payment processors and identity verification providers. The categories of data we collect are described below.

hbsje processes personal data only where we have a lawful basis for doing so. The primary legal bases on which we rely are: (a) performance of a contract — processing necessary to provide you with the hbsje platform services under our Terms & Conditions; (b) legal obligation — processing required to comply with applicable anti-money-laundering, fraud prevention, and financial regulation requirements; (c) legitimate interests — processing for purposes such as fraud detection, platform security, and service improvement where those interests are not overridden by your rights; and (d) consent — for marketing communications, which you may withdraw at any time.

Specifically, hbsje uses your personal data for the following purposes:

• Account Management: Creating and maintaining your registered hbsje account, authenticating your identity at login, and enabling you to access platform features appropriate to your verified status.
• Transaction Processing: Processing BDT deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard; processing withdrawal requests to your verified payment method; maintaining accurate transaction records.
• KYC & Compliance: Verifying your age and identity in accordance with our KYC programme; complying with anti-money-laundering (AML) obligations; screening against sanctions and politically exposed persons (PEP) lists as required.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance through live chat and email support channels.
• Platform Security & Fraud Prevention: Monitoring for suspicious account activity, detecting bonus abuse, preventing multiple account registration, and protecting the platform against automated attacks and collusion.
• Service Improvement: Analysing aggregate usage data to improve game offerings, page performance, payment flows, and the overall player experience on the hbsje platform.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling; enforcing self-exclusion requests and deposit limits set by you through your account settings.
• Marketing Communications (with consent only): Sending you promotional offers, bonus notifications, and news about hbsje events such as BPL cricket promotions, Eid special offers, and Pohela Boishakh bonuses — where you have provided explicit consent and have not subsequently opted out.

hbsje does not use your personal data for automated decision-making or profiling in ways that produce legal or similarly significant effects on you, except where required for fraud prevention screening — in which case you have the right to request human review of any automated decision that affects your account.

hbsje does not sell your personal data to any third party. We share data only where necessary to deliver the platform services, fulfil legal obligations, or protect the security of the platform. The categories of third parties with whom we share data are set out below.

All third-party service providers engaged by hbsje are required to enter into data processing agreements that bind them to appropriate confidentiality and security standards consistent with this Privacy Policy. hbsje remains responsible for ensuring that third-party processors handle your data in accordance with applicable privacy obligations.

hbsje does not transfer your personal data to countries outside the jurisdiction in which it was collected, except where necessary for the payment processing or KYC services described above and where appropriate data transfer safeguards are in place.

The hbsje platform uses cookies and similar tracking technologies to ensure the site functions correctly, to remember your preferences, to keep your session secure, and to analyse how the platform is used so we can improve it over time. A cookie is a small text file placed on your device by the hbsje server when you visit the platform.

hbsje does not use third-party advertising cookies or behavioural targeting cookies. We do not allow external advertising networks to place cookies on the hbsje platform.

Managing Cookies: You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the hbsje platform, including the ability to log in and maintain a game session. Instructions for managing cookies are available in the help documentation for all major browsers.

hbsje implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include, but are not limited to, the following controls:

• Transport Encryption: All data transmitted between your device and the hbsje platform is encrypted in transit using TLS 1.2 or higher. The platform operates exclusively over HTTPS.
• Storage Encryption: Sensitive data stored in hbsje databases — including KYC documents, payment details, and identity records — is encrypted at rest using AES-256.
• Access Controls: Access to personal data within hbsje's internal systems is restricted on a strict need-to-know basis. Staff who handle personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their hbsje account. 2FA is mandatory for all internal staff who access player data systems.
• Intrusion Detection & Monitoring: hbsje operates continuous monitoring systems that alert the security team to anomalous traffic patterns, brute-force login attempts, and other potential security incidents in real time.
• Penetration Testing: The hbsje platform undergoes periodic security assessments and penetration tests conducted by qualified external security professionals to identify and remediate vulnerabilities.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, hbsje will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

hbsje retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law. The following retention periods apply to the principal categories of data we hold:

When the retention period for a category of data expires, hbsje will securely delete or anonymise the data in accordance with our internal data destruction procedures. Anonymised data from which you cannot be identified may be retained indefinitely for statistical and analytical purposes.

If you request deletion of your personal data under your rights described in Section 7 below, we will action that request promptly, subject to any legal obligations that require us to retain specific records for the periods noted in the table above. We will inform you of any such obligations at the time of your request.

As a player on the hbsje platform, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 8. We will respond to all valid requests within a reasonable timeframe and, in any event, within 30 days of receipt.

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to raise a concern about how hbsje handles your personal data, please contact us using one of the channels below. All privacy-related communications are handled by our dedicated support team.

hbsje is committed to resolving all privacy enquiries in a timely and transparent manner. We aim to acknowledge all privacy requests within two business days and to provide a full response within 30 days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for the delay.