Privacy Policy — hebjee Casino Bangladesh

1. Data We Collect

hebjee collects personal data from players and site visitors through several channels: directly when you register an account or complete a KYC submission, automatically when you browse the platform, and from third-party payment processors when you make a deposit or withdrawal. The categories of data we collect are described in full below.

1.1 Registration Data

When you create a hebjee account you provide:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used for 18+ age verification)
• Residential address in Bangladesh (city, district, postal code)
• Mobile phone number (registered bKash or Nagad number where applicable)
• Email address
• Chosen username and encrypted password

1.2 KYC Verification Data

To comply with anti-money laundering (AML) obligations and to verify player age, hebjee collects:

• Copy of Bangladesh National Identity Card (NID), passport, or driving licence
• Proof of residential address (utility bill, bank statement, or government correspondence dated within 90 days)
• Proof of payment method (screenshot of registered bKash, Nagad, or Upay wallet showing account holder name and number)
• Selfie photograph where required for enhanced due diligence on high-value accounts

1.3 Transaction Data

Each deposit and withdrawal generates a transaction record that includes the payment method used, the BDT amount, the date and time (Bangladesh Standard Time, UTC+6), and the transaction reference number provided by the payment processor. hebjee does not store full card numbers — only the last four digits and card type (Visa or Mastercard) are retained for reference purposes.

1.4 Gameplay Data

hebjee records game session logs including the games played, wagers placed, outcomes received, session start and end times, and the device and IP address from which the session was initiated. This data is used for fairness auditing, dispute resolution, responsible gaming monitoring, and platform improvement.

1.5 Technical & Device Data

When you access hebjee.net, our servers automatically record:

• IP address and approximate geographic location (city level)
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Referring URL (the page you came from before arriving at hebjee.net)
• Cookie identifiers (see the Cookies section below)

2. How We Use Your Data

hebjee processes personal data only for specific, legitimate purposes. The legal basis for each processing activity is identified below alongside the purpose.

Purpose	Legal Basis	Data Categories Used
Account registration and authentication	Contract performance	Registration data, device data
Age and identity verification (KYC)	Legal obligation / Contract	KYC documents, registration data
Processing deposits and withdrawals	Contract performance	Transaction data, registration data
Fraud detection and AML monitoring	Legal obligation / Legitimate interest	All categories
Responsible gaming monitoring	Legal obligation / Legitimate interest	Gameplay data, transaction data
Customer support and dispute resolution	Contract performance / Legitimate interest	All relevant categories
Promotional communications (opt-in only)	Consent	Registration data, gameplay preferences
Platform analytics and improvement	Legitimate interest	Technical data, gameplay data (aggregated)

2.1 hebjee does not use automated decision-making processes that produce legally significant effects on players without human review. For example, account suspension decisions resulting from fraud detection algorithms are reviewed by a member of the hebjee compliance team before any action is taken against a player account.

2.2 Where hebjee uses your gameplay and transaction data for responsible gaming monitoring — for instance, to identify patterns consistent with problem gambling — this activity is carried out in the player's interest and forms part of hebjee's duty of care obligations. Players identified as potentially at risk will be contacted by the support team and offered access to responsible gaming tools.

3. Data Sharing & Disclosure

3.1 hebjee does not sell, rent, or trade player personal data to any third party for commercial or marketing purposes. Personal data is shared only in the limited circumstances described in this section.

3.2 Payment Processors. When you make a deposit or withdrawal, hebjee shares the minimum data required to process the transaction with the relevant payment processor — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. Each of these providers operates under its own privacy policy and data protection obligations. hebjee shares only the transaction amount, the account holder's name, and the registered payment identifier (mobile number or card token) with payment processors.

3.3 Game Providers. When you access a game powered by a third-party studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, a session token is passed to that provider's game server to authenticate the game session. This token is a pseudonymous identifier — it does not contain your name, email, or payment details. Game providers use session tokens solely to deliver game content and record outcomes.

3.4 Legal and Regulatory Disclosure. hebjee may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory authorities where required to do so by applicable law, court order, or regulatory direction. In such cases, hebjee will disclose only the minimum data necessary to satisfy the legal requirement and will notify the affected player of the disclosure where it is legally permissible to do so.

3.5 Service Providers. hebjee engages a small number of carefully vetted third-party service providers (for example, KYC verification technology providers and customer support software vendors) who process personal data on hebjee's behalf under strict data processing agreements. These providers are not permitted to use player data for any purpose other than delivering the contracted service to hebjee.

4. Cookies & Tracking

4.1 hebjee uses cookies and similar tracking technologies (local storage, session tokens) to operate the platform, maintain your login session, remember your account preferences, and collect aggregated analytics data that helps us understand how the platform is used.

4.2 The following categories of cookies are used on hebjee.net:

• Essential cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without preventing access to the platform.
• Functional cookies: Remember your account preferences such as display language, last-played game category, and notification settings. These persist across sessions.
• Analytics cookies: Collect anonymised data about page views, session duration, and navigation paths to help hebjee identify areas of the platform that need improvement. No personally identifiable data is transmitted through analytics cookies.
• Fraud prevention cookies: Used to detect unusual or suspicious access patterns, multiple account attempts, and automated bot activity. These are essential for platform security.

4.3 hebjee does not use third-party advertising cookies or behavioural tracking cookies that build cross-site profiles of your browsing activity. No advertising network has access to your hebjee session or gameplay data through cookies.

4.4 You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging into your hebjee account. Disabling functional or analytics cookies will not prevent platform access but may reduce the quality of your experience.

5. Data Retention

5.1 hebjee retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The retention periods applicable to each data category are set out below.

• Account registration data: Retained for the lifetime of the account plus a minimum of 5 years following account closure, in line with standard AML record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification. Documents are stored in encrypted, access-controlled storage and are accessible only to authorised compliance personnel.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gameplay session logs: Retained for a minimum of 2 years from the date of each session for dispute resolution purposes.
• Customer support correspondence: Retained for 2 years from the date of the last interaction in the relevant support thread.
• Marketing consent records: Retained for as long as consent is active, plus 1 year following withdrawal of consent, to demonstrate compliance.
• Technical and device data (server logs): Retained for 90 days in live systems, then archived for up to 12 months for security investigation purposes before deletion.

5.2 When the applicable retention period expires, hebjee permanently deletes or anonymises the relevant data so that it can no longer be associated with any individual player.

6. Your Privacy Rights

As a hebjee player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact the hebjee privacy team at [email protected] from your registered email address, clearly stating which right you wish to exercise.

• Right of Access: You may request a copy of all personal data hebjee holds about you. hebjee will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as an address update) can often be made directly through your account settings.
• Right to Erasure: Subject to legal retention obligations, you may request deletion of your personal data. hebjee will confirm which data can be deleted immediately and which must be retained for legal compliance purposes.
• Right to Restriction: You may request that hebjee restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being disputed.
• Right to Data Portability: You may request that hebjee provides your personal data in a structured, machine-readable format (CSV or JSON) so that it can be transferred to another service provider.
• Right to Object: You may object to hebjee processing your data on the basis of legitimate interests, including profiling for responsible gaming monitoring. hebjee will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Marketing Consent: You may withdraw consent to receive marketing communications at any time, with immediate effect, through your account dashboard or by emailing [email protected].

7. Data Security

7.1 hebjee maintains a comprehensive information security programme designed to protect player personal data from unauthorised access, disclosure, alteration, or destruction. Key technical and organisational security measures include:

• TLS 1.2 or higher encryption for all data in transit between players and hebjee servers
• AES-256 encryption for sensitive data at rest, including KYC documents and payment identifiers
• Multi-factor authentication (MFA) for all internal staff with access to production systems containing player data
• Role-based access controls ensuring that individual staff members can access only the data required for their specific job function
• Regular third-party penetration testing of the hebjee platform and underlying infrastructure
• 24/7 intrusion detection and security monitoring of all production systems
• Segregated storage of KYC documents, payment data, and gameplay records in separate access-controlled data stores

7.2 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, hebjee will notify affected account holders by email within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, and the steps hebjee is taking to contain and remediate the incident.

7.3 While hebjee takes all reasonable technical and organisational precautions to protect player data, no internet-based service can guarantee absolute security. Players are encouraged to use a strong, unique password for their hebjee account, to enable two-factor authentication where available, and to contact [email protected] immediately if they believe their account credentials have been compromised.

8. Contact & Complaints

8.1 If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a concern about hebjee's data handling practices, please contact the hebjee privacy team using the details below. All privacy correspondence must be sent from your registered email address so that we can verify your identity before processing your request.

Privacy enquiries email: [email protected]
Subject line: Privacy Request — [your registered username]
Response time: Within 5 business days (BST, UTC+6)

8.2 Complaints. If you are not satisfied with hebjee's response to a privacy rights request or concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. hebjee takes all complaints seriously and will cooperate fully with any regulatory investigation into its data processing activities.

8.3 Policy Updates. hebjee may update this Privacy Policy from time to time to reflect changes in applicable law, platform features, or data processing practices. Material changes will be communicated to registered account holders by email at least 14 days before taking effect. The "Effective" date at the top of this document will be updated each time a revision is published. Your continued use of the hebjee platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms.