hibazi Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how hibazi ("hibazi", "we", "us", "our") collects, uses, stores, discloses, and protects personal information about individuals ("you", "your", "Player") who access or use the hibazi website at https://hibazi.pro ("the Site") and any associated services. By registering for an account or continuing to use the Site, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein.

hibazi is committed to safeguarding the privacy of all players, particularly those based in Bangladesh. This Policy is written in plain English and structured to make your rights and our obligations as clear as possible. If you have any questions after reading this document, please contact us at [email protected].

2. Data Controller

hibazi is the data controller for all personal information collected through the Site. As the controller, hibazi determines the purposes for which personal data is processed and is responsible for ensuring that processing takes place lawfully, fairly, and transparently. For all data-related queries or requests, please contact:

Email: [email protected] (plain text — not a clickable link)
Response target: Within 5 business days (Bangladesh Standard Time, UTC+6).

3. Personal Data We Collect

hibazi collects personal data through several channels. The categories of data we collect include, but are not limited to, the following:

3.1 Registration Data

When you create a hibazi account, we collect your full legal name, date of birth, residential address (including city — for example Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh), mobile phone number, and email address. This information is mandatory for account creation and is used to verify your identity and communicate with you.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and responsible gaming requirements, we may request copies of government-issued identity documents (such as your National Identity Card or passport), proof of address (such as a utility bill or bank statement dated within three months), and proof of payment method ownership. Documents submitted for KYC are stored securely and are accessible only to authorised compliance personnel.

3.3 Financial Data

We record details of all deposits and withdrawals made through your hibazi account, including transaction amounts, timestamps, and the payment method used (for example bKash, Nagad, Rocket, Upay, Visa, or Mastercard). We do not store full card numbers or mobile banking PINs on our servers. Payment processing is handled through encrypted channels, and sensitive payment credentials are tokenised by our payment partners.

3.4 Gameplay and Betting Data

hibazi logs all gameplay sessions, bet history, game outcomes, and wagering activity associated with your account. This data is used for account management, dispute resolution, bonus calculation, fraud detection, and responsible gaming monitoring. Game logs are retained for a minimum of five years in accordance with standard industry practice.

3.5 Device and Technical Data

When you visit the Site, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device identifiers, referring URL, pages visited, and session duration. This data is used for security monitoring, fraud prevention, and improving the performance of the Site.

3.6 Communications Data

We retain records of all communications between you and the hibazi support team, including live chat transcripts, support ticket threads, and email correspondence. These records are used to resolve disputes, improve customer service quality, and maintain an audit trail of account-related interactions.

3.7 Marketing Preferences

If you opt in to receive marketing communications, we store your preferences alongside your contact details. You may withdraw consent for marketing communications at any time by contacting [email protected] or using the unsubscribe link included in every marketing email.

4. How We Use Your Personal Data

hibazi processes your personal data for the following purposes and on the following legal bases:

• Account Management: To create, maintain, and administer your hibazi account, including verifying your identity, processing transactions, and providing customer support. Legal basis: performance of a contract.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct. Legal basis: legitimate interest and legal obligation.
• Responsible Gaming: To monitor gambling behaviour, enforce deposit and loss limits, and apply self-exclusion measures where requested. Legal basis: legal obligation and legitimate interest.
• Legal Compliance: To meet obligations under applicable anti-money laundering, counter-financing of terrorism, and data protection frameworks. Legal basis: legal obligation.
• Service Improvement: To analyse usage patterns, fix technical issues, and improve the features and performance of the Site. Legal basis: legitimate interest.
• Marketing Communications: To send you promotional offers, tournament announcements, seasonal promotions (such as BPL season offers or Eid specials), and product updates — but only where you have given your explicit consent. Legal basis: consent.

5. Sharing Your Personal Data

hibazi does not sell, rent, or trade your personal data to third parties. We may share your data with trusted third parties strictly on a need-to-know basis and only where necessary to deliver the hibazi service or meet legal obligations. Categories of recipients include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and international card processors (Visa, Mastercard) receive the minimum transactional data required to process your deposits and withdrawals.
• Identity Verification Partners: Third-party KYC providers who assist in verifying the authenticity of identity documents submitted during account verification.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers necessary to deliver game content. They do not receive your full personal profile.
• Legal Authorities: Regulatory bodies, law enforcement agencies, or courts where disclosure is required by a valid legal order or is otherwise required by law. hibazi will notify you of such disclosures where legally permitted to do so.
• Technical Service Providers: Hosting, cloud infrastructure, analytics, and cybersecurity vendors who process data on hibazi's behalf under strict data processing agreements requiring them to handle data only as instructed.

6. Cookies and Tracking Technologies

The hibazi Site uses cookies and similar tracking technologies to ensure the Site functions correctly, to remember your preferences, and to help us understand how players navigate the platform. The types of cookies we use are as follows:

6.1 Strictly Necessary Cookies

These cookies are essential for the Site to operate. They manage your login session, maintain your account state between pages, and enable core security features such as CSRF protection. You cannot opt out of strictly necessary cookies without impairing your ability to use the Site.

6.2 Performance and Analytics Cookies

These cookies collect anonymised data about how visitors use the Site — which pages are visited most often, how long sessions last, and where players navigate from. This information is used solely to improve the Site and is not linked to any identifiable individual.

6.3 Functional Cookies

Functional cookies remember your preferences, such as your display language, notification settings, and game-history filters, so that you do not have to reconfigure these settings on every visit.

6.4 Marketing Cookies

Where you have consented, marketing cookies allow hibazi to show you relevant promotional content on the Site based on your previous browsing and gaming activity. You may withdraw this consent at any time by adjusting your cookie preferences in your account settings or by clearing your browser cookies.

7. Data Retention

hibazi retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account data and KYC documents: Retained for the lifetime of the account and for a minimum of five years following account closure.
• Financial transaction records: Retained for a minimum of seven years to meet financial record-keeping obligations.
• Gameplay logs: Retained for a minimum of five years for dispute resolution and audit purposes.
• Support communications: Retained for three years from the date of the most recent interaction.
• Marketing preference data: Retained until you withdraw consent, at which point your details are removed from active marketing lists within 10 business days.

Where data is no longer required, hibazi securely deletes or anonymises it in accordance with recognised data destruction standards.

8. Your Data Rights

As a hibazi player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected]. hibazi will respond within 5 business days and will action verified requests within 30 calendar days.

9. Data Security

hibazi implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and hibazi servers.
• Encryption at rest for sensitive data stored in hibazi databases, including KYC documents and financial records.
• Role-based access controls ensuring that staff can only access personal data relevant to their job function.
• Regular security assessments, vulnerability scanning, and penetration testing of the hibazi platform.
• Multi-factor authentication requirements for all internal administrative access to systems holding personal data.
• Incident response procedures to detect, contain, and report data breaches in a timely manner.

While hibazi takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying hibazi immediately if you suspect that your account has been compromised.

10. Children and Minors

The hibazi platform is strictly for adults aged 21 years and older. hibazi does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will delete that data promptly and close any associated account. If you believe that a minor has registered on hibazi, please contact [email protected] immediately.

11. Links to Third-Party Content

The hibazi Site may reference third-party game providers and payment partners by name. hibazi is not responsible for the privacy practices of any third-party organisation. This Policy applies solely to data processed by hibazi through the Site. We encourage you to review the privacy policies of any third-party service you interact with independently of hibazi.

12. Changes to This Policy

hibazi reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via email to the address on file and/or by posting a prominent notice on the Site. The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. Continued use of the Site following notification of changes constitutes acceptance of the revised Policy. If you do not agree with the updated terms, you should cease using the Site and contact us to request account closure.

13. Contacting hibazi About Privacy

For all privacy-related enquiries, data subject access requests, complaints, or concerns, please contact the hibazi Privacy team in writing. We are committed to resolving all privacy matters promptly and transparently.

Email: [email protected] (plain text — not a clickable link)
Subject line: Please use "Privacy Request" in the subject line to ensure your message reaches the correct team.
Response target: Within 5 business days (Bangladesh Standard Time, UTC+6).