hbaze Privacy Policy
At hbaze, we take the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect when you use our cricket betting and casino platform, why we collect it, how it is stored and protected, and what rights you hold over your own data. We are committed to handling your information with transparency and care.
Last Updated: 1 January 2026 | If we make material changes to this Privacy Policy, registered users will be notified by email before those changes take effect.
Our Privacy Commitments
End-to-End Encryption
All data transmitted between your device and hbaze servers is protected by industry-standard SSL/TLS encryption. Your personal details, payment information, and account credentials are never sent over unencrypted connections.
No Data Selling
hbaze does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Your information is used exclusively to operate and improve the hbaze platform and fulfill legal obligations.
Your Data, Your Rights
You hold clear rights over your personal data — including the right to access, correct, and request deletion. We provide straightforward mechanisms to exercise these rights by contacting our support team directly.
Secure Data Storage
Account and transaction data is stored on secured servers with access restricted to authorised hbaze personnel only. We apply role-based access controls and audit logging to prevent unauthorised internal access.
Defined Retention Periods
We do not hold your data indefinitely. Retention periods are defined by operational necessity and legal requirements. When data is no longer needed, it is securely deleted or anonymised according to our data lifecycle policy.
Transparent Cookie Policy
We use cookies to keep the platform running smoothly and to understand how players use the site. Our cookie policy is fully detailed in this document, including which categories of cookies are used and how you can manage them.
Information We Collect
When you register for an account, make deposits and withdrawals, place bets, or interact with hbaze in any way, we collect a range of personal and technical data. This section describes each category of information we collect and the context in which it is gathered. We collect only what is necessary to operate the hbaze platform, comply with legal obligations, and deliver a safe gaming environment for all players across Bangladesh.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID (NID) number, passport number | At registration and during KYC verification |
| Contact Data | Email address, mobile number, city or district of residence (e.g., Dhaka, Chittagong, Sylhet) | At registration and when updating account settings |
| Financial Data | bKash / Nagad / Rocket account number, Dutch-Bangla Bank or City Bank account details, deposit and withdrawal transaction records | When making deposits or requesting withdrawals |
| KYC Documents | Scanned copies or photos of government-issued ID, utility bills, proof of payment method ownership | When requested prior to first withdrawal or during account review |
| Wagering & Game Data | Bet history, game session data, win/loss records, bonus usage, casino game logs | Continuously during active use of the platform |
| Technical Data | IP address, device type, browser version, operating system, session timestamps, referral URL | Automatically on each platform visit |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | When you contact hbaze support or respond to surveys |
| Cookie & Tracking Data | Session cookies, preference cookies, analytics identifiers, ad attribution tokens | Automatically via browser cookies and tracking scripts on platform pages |
Sensitive Data: hbaze does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric identifiers beyond what is contained in a government-issued ID submitted for KYC. KYC documents are stored securely, accessed by authorised compliance staff only, and deleted or anonymised once verification is complete and the minimum retention period has passed.
How We Use Your Data
hbaze processes your personal data for specific, legitimate purposes. We do not use your data for any purpose beyond what is described in this section. Each use of your data is grounded in one of three lawful bases: (a) performance of the contract between you and hbaze, (b) compliance with a legal obligation, or (c) our legitimate interest in operating a secure, compliant, and commercially viable platform.
- Account Management: To create, verify, maintain, and close your hbaze account, including processing identity verification and KYC checks required under anti-money laundering obligations.
- Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported banks, and to maintain accurate financial records of all account activity.
- Platform Delivery: To operate the betting and casino platform, deliver game content from third-party providers, process bets, and credit winnings to your account wallet.
- Customer Support: To respond to your support requests, resolve disputes, investigate complaints, and communicate account-related updates including security alerts.
- Legal & Regulatory Compliance: To fulfill obligations under applicable laws, including anti-money laundering (AML) requirements, fraud prevention duties, and any lawful requests from regulatory or law enforcement authorities.
- Fraud & Security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, and other security threats to the platform and its players.
- Responsible Gaming: To monitor wagering patterns that may indicate problem gambling behaviour, apply responsible gaming tools such as deposit limits and self-exclusion, and send wellbeing communications where appropriate.
- Personalisation: To personalise your platform experience, including recommending relevant cricket markets (BPL, IPL, Bangladesh Tigers), casino games, and promotional offers that match your demonstrated preferences.
- Marketing Communications: Where you have opted in, to send promotional emails or SMS messages about offers, bonuses, and cricket betting events. You may opt out of marketing communications at any time via your account settings or by contacting support.
- Platform Improvement: To analyse aggregated and anonymised usage data — including page views, bet volumes, game popularity, and support enquiry trends — to improve platform features, performance, and content.
Data Sharing & Third Parties
hbaze does not sell your personal data. We share your information only where it is strictly necessary to deliver the platform's services, satisfy legal requirements, or protect the safety and integrity of our players and the platform. All third-party partners who receive personal data from hbaze are bound by contractual data protection obligations and are permitted to use your data only for the specific purposes outlined below.
Categories of Recipients
- Game Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios receive session identifiers and bet data necessary to deliver their game content and settle outcomes.
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum data required to process your deposit or withdrawal transaction securely.
- Identity Verification Services: Third-party KYC and age verification providers may process your ID documents to confirm your identity and eligibility. These providers operate under strict data handling agreements.
- Analytics Providers: Aggregated and anonymised usage data may be shared with analytics platforms to help us understand how the platform is used and where improvements can be made.
- Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies where required by applicable law or pursuant to a lawful order.
International Data Transfers
Some of our third-party service providers — including game studios and analytics platforms — may be located outside Bangladesh. Where personal data is transferred internationally, hbaze takes steps to ensure that appropriate safeguards are in place, including contractual protections consistent with applicable data protection standards.
We do not transfer your financial data or KYC documents outside the necessary processing chain required to operate your account and satisfy legal obligations. Payment data shared with bKash, Nagad, Rocket, and local bank partners remains within Bangladesh's domestic financial infrastructure wherever possible.
What We Never Do: hbaze will never sell your personal data to advertisers, data brokers, or any other commercial third party for their own use. We will never share your identity documents with any party that does not have a direct, necessary role in operating your account or fulfilling a legal obligation. Any approach claiming to represent hbaze and requesting your personal data outside of our official channels should be treated as fraudulent.
Cookies & Tracking Technologies
hbaze uses cookies and similar tracking technologies to operate core platform functionality, remember your preferences, understand how you interact with our pages, and — where you have consented — to deliver relevant promotional content. Cookies are small text files stored on your device by your browser. They do not contain executable code and cannot access other files on your device.
Strictly Necessary Cookies
These cookies are essential for the platform to function. They manage your login session, maintain your account state across page navigations, protect against cross-site request forgery (CSRF), and enable core betting and payment flows. Without these cookies, the platform cannot operate. They are always active and cannot be disabled.
Functional Cookies
Functional cookies remember your platform preferences — such as your chosen display language, favourite sports markets (e.g., BPL or IPL), saved bet settings, and notification preferences. Disabling these cookies will not prevent you from using the platform but will reset your personalisation settings on each visit.
Performance & Analytics Cookies
Analytics cookies collect anonymised data about how visitors use the hbaze platform — including which pages are viewed most frequently, how long sessions last, and where users encounter errors. This data helps us identify performance bottlenecks and improve the overall player experience. Analytics data is aggregated and is not linked to your personal identity.
Marketing & Attribution Cookies
Where you have provided consent, marketing cookies track how you arrived at hbaze (e.g., via a referring partner site or campaign link) and may be used to deliver relevant promotional messaging about hbaze cricket betting and casino offers. You can withdraw consent for marketing cookies at any time via your browser settings or by contacting our support team.
Managing Cookies: Most browsers allow you to view, block, or delete cookies through their settings menu. Blocking strictly necessary cookies will affect the platform's ability to function correctly. For guidance on managing cookies in your specific browser, refer to your browser's help documentation. Note that clearing cookies will log you out of your hbaze session and reset saved preferences.
Data Security & Retention
hbaze applies a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information against unauthorised access, disclosure, alteration, or destruction. No online platform can guarantee absolute security, but we maintain industry-standard protections and continuously review our security posture.
- SSL/TLS Encryption: All data in transit between your device and hbaze servers is encrypted using TLS 1.2 or higher. This includes login credentials, payment data, and personal account information.
- Encryption at Rest: Sensitive data stored on our servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption, making it unreadable without the appropriate decryption keys.
- Access Controls: Access to personal data is restricted on a need-to-know basis. hbaze staff members are granted the minimum level of access required to perform their specific job functions. All internal data access is logged and subject to periodic audit.
- Incident Response: In the event of a data breach that poses a risk to affected individuals, hbaze will notify impacted users promptly and take immediate remediation steps. We maintain a documented incident response plan reviewed on a regular schedule.
- Password Security: User passwords are stored as salted cryptographic hashes and are never stored in plaintext. hbaze staff cannot view your password and will never ask you to provide it.
Data Retention Schedule
- Active Account Data: Retained for the duration of your active account plus a minimum of 5 years after account closure, as required for AML and financial record-keeping compliance.
- KYC Documents: Retained for 5 years following account closure or the date of the last transaction, whichever is later.
- Transaction Records: Deposit, withdrawal, and bet history retained for 5 years from the date of each transaction.
- Support Communications: Chat and email records retained for 2 years from the date of the last interaction in a given support thread.
- Analytics Data: Anonymised analytics data may be retained indefinitely as it cannot be linked back to individual players.
Your Privacy Rights
As an hbaze account holder, you hold meaningful rights over your personal data. We are committed to making it straightforward for you to exercise these rights. To submit any data rights request, contact our support team at [email protected] with the subject line "Data Rights Request" and we will respond within 30 days of receipt. Identity verification will be required before any data is disclosed or deleted.
Right to Access
You may request a copy of all personal data hbaze holds about you, including account details, transaction history, and any KYC documents on file.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected promptly without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected. This right is subject to legal retention obligations.
Right to Restriction
You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
Right to Portability
Where processing is based on your consent or on a contract, you may request your data in a structured, machine-readable format for transfer to another service.
Right to Object
You may object to processing carried out on the basis of our legitimate interests, including profiling for personalisation or direct marketing communications.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting prior lawful processing.
Automated Decision-Making
You have the right not to be subject to solely automated decisions that produce significant legal effects, including account suspension decisions based purely on automated fraud scoring.
Children & Minors
hbaze is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 18. Our registration process requires users to confirm their date of birth, and identity verification checks are applied to confirm age eligibility before any withdrawal is permitted.
If we discover that personal data has been collected from a person under 18 — whether through a misrepresentation of age at registration or any other means — we will immediately close the associated account, delete all collected personal data, and return any deposit amounts to the originating payment method. Winnings associated with an underage account will be forfeited.
Parental Guidance: If you are the parent or guardian of a minor and believe they may have registered on hbaze or been exposed to gambling content on our platform, please contact us immediately at [email protected]. We take underage access seriously and will take prompt action to investigate and resolve any reported case. We also recommend using parental control software to restrict access to gambling websites for minors in your household.
Policy Updates & Contact
Changes to This Privacy Policy
hbaze reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered account holders via email at least 7 days before the revised policy takes effect. The updated policy will always be accessible at hbaze.net/privacy-policy with the effective date clearly displayed at the top of the page.
Your continued use of the hbaze platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account by contacting our support team before the new policy takes effect. We recommend reviewing this page periodically to stay informed of how we protect your data.
Contact Our Privacy Team
If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a concern about how hbaze handles your personal information, please reach out to our support team. We are committed to addressing all privacy-related enquiries promptly and transparently.
- Email: [email protected] — use subject line "Privacy Enquiry" for fastest routing to our data team.
- Response Time: Privacy enquiries are acknowledged within 5 business days and fully resolved within 30 calendar days wherever possible.
- Operating Hours: Support is available 7 days a week, Bangladesh Standard Time (BST, UTC+6). Response times may be longer on public holidays such as Eid and Victory Day (December 16).
- Identity Verification: To protect your privacy, we will verify your identity before processing any data access, correction, or deletion request. Please be prepared to confirm your registered email address and account details.
Governing Framework: This Privacy Policy is intended to reflect best-practice data protection principles applicable to online gaming platforms serving the Bangladesh market. hbaze is committed to maintaining a safe, transparent, and fair environment for all players. By using the hbaze platform, you confirm that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.
Have Questions About Your Data?
Our support team is ready to help with any privacy-related enquiry. You can also explore our FAQ for quick answers, review our Responsible Gaming commitments, or head to the hbaze Casino to start playing safely. 18+