hbaze Privacy Policy — Your Data, Your Rights

hbaze is committed to protecting the personal information of every player on our platform. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have over your information.

SSL Encrypted No Third-Party Sale Effective 2026

Last updated: January 2026

Introduction

Welcome to hbaze. This Privacy Policy ("Policy") describes how hbaze ("hbaze", "we", "us", "our") collects, uses, stores, shares and protects personal information provided by or collected from users ("you", "your", "User", "Player") of the hbaze website and platform accessible at https://hbaze.bet (the "Platform"). By registering an account on the Platform or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein.

This Policy applies to all personal data processed by hbaze in connection with the Platform, whether you are a registered account holder or a visitor who browses without registering. hbaze may update this Policy from time to time. The revised Policy will be published on this page with an updated date. Continued use of the Platform after any revision constitutes acceptance of the updated Policy. We encourage you to review this page periodically.

Your Privacy Matters: hbaze does not sell, rent or trade your personal data to any third-party marketing company. Your data is used solely to operate, secure and improve the hbaze platform and to meet our legal obligations. We collect only the data that is necessary for these purposes.

Our Privacy Principles

🔒
Data Security
All data transmitted between your device and hbaze is encrypted using SSL technology. Account data is stored on secured servers.
🙅
No Data Sale
We never sell or rent your personal data to third-party advertisers or marketing companies under any circumstances.
👁️
Transparency
We clearly explain what data we collect and why. You can request a copy of your data at any time by contacting our support team.
✏️
Right to Correct
If any personal information we hold is inaccurate, you have the right to request a correction. Contact support with the details to be updated.
🗑️
Right to Delete
You may request deletion of your personal data when your account is closed, subject to our legal retention obligations.
📧
Contact Us
For any privacy-related request, email us at the address in the footer. We aim to respond within 5 business days.

Information We Collect

hbaze collects personal information in three main ways: information you provide directly during registration and account use, information generated automatically through your use of the Platform, and information received from payment service providers in connection with deposits and withdrawals.

Category 1
Registration and Account Data
When you create an hbaze account, we collect: your chosen username, a hashed and salted version of your password (we do not store your password in plain text), your Bangladesh mobile number, your date of birth (for age verification purposes), and any optional profile information you choose to provide. We may also collect government-issued identity document details if you are required to complete KYC verification — for example, when your account withdrawal history reaches a threshold that triggers a verification review.
Category 2
Usage and Technical Data
When you use the Platform, we automatically collect certain technical and usage data including: your IP address, browser type and version, mobile device type and operating system, session timestamps (login time, logout time, session duration), pages visited and features used within the Platform, game history (games played, stakes placed, outcomes), betting and transaction history, and device identifiers. This data is used to operate the Platform, detect suspicious activity, and improve user experience.
Category 3
Payment Provider Data
When you make a deposit or withdrawal using bKash, Nagad or Rocket, hbaze receives a transaction confirmation reference from the payment provider. This reference includes: the mobile wallet number used for the transaction, the transaction amount, the transaction timestamp, and a provider-issued transaction ID. hbaze does not store your full mobile wallet PIN or any credentials used to authenticate you with bKash, Nagad or Rocket. Those credentials are entered directly on the payment provider's interface and are never transmitted to or stored by hbaze.

How We Use Your Information

hbaze uses personal data collected from users for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your consent or being legally required to do so.

Purpose 1
Account Operation and Service Delivery
We use your registration data to create and maintain your hbaze account, verify your identity and age, process your deposits and withdrawals, provide access to betting markets and casino games, and deliver customer support. This is the primary purpose for which your data is collected and is necessary to fulfill our service agreement with you.
Purpose 2
Security, Fraud Prevention and Compliance
We use technical and usage data to detect and prevent fraudulent activity, identify and respond to security incidents, enforce our Terms & Conditions (including identifying duplicate accounts and prohibited conduct), comply with responsible gaming requirements including age verification and self-exclusion management, and meet any legal or regulatory obligations applicable to the operation of the Platform.
Purpose 3
Platform Improvement and Analytics
We use aggregated and anonymised usage data to understand how users interact with the Platform, which features are most used, where technical issues occur, and how the platform performs on different devices and network conditions common in Bangladesh. This analytics data is used only internally to improve the Platform. It does not identify you personally and is not shared with third parties.

Sharing of Your Information

hbaze does not sell, trade or rent your personal data to any third party. We share your data only in the specific circumstances described below. In each case, sharing is limited to the minimum information necessary for the stated purpose.

Disclosure 1
Payment Service Providers
To process your deposits and withdrawals, hbaze shares transaction reference data with the relevant mobile wallet providers (bKash, Nagad, Rocket). This is limited to the information needed to complete the specific transaction. These providers process your payment data under their own privacy policies and terms of service. hbaze is not responsible for the privacy practices of bKash, Nagad or Rocket.
Disclosure 2
Game Content and Technology Providers
hbaze uses third-party game studios and live dealer operators (including Evolution Gaming, Ezugi and Pragmatic Play) to deliver casino and live game content. When you play a game from one of these providers through the hbaze Platform, your session data (such as a session token and game outcome data) may be processed by that provider's systems. No personally identifiable information beyond what is necessary to run the game session is shared. These providers are contractually required to treat game session data confidentially.
Disclosure 3
Legal and Regulatory Disclosure
hbaze may disclose personal data to law enforcement agencies, regulatory bodies, or other official authorities when required to do so by law, court order, or valid legal process. In such cases hbaze will disclose only the minimum information required to satisfy the legal obligation. Where legally permissible, hbaze will notify the affected user of any such disclosure.

Payment Data and Financial Privacy

hbaze handles payment-related data with particular care. All financial transactions on the Platform are processed in Bangladeshi Taka (BDT). When you make a deposit via bKash, Nagad or Rocket, the authentication step (entering your PIN or authorising via your mobile wallet app) takes place entirely within the payment provider's own interface — hbaze never sees, receives or stores your mobile wallet PIN or authentication credentials.

Your hbaze wallet balance and full transaction history are visible only to you (through your account dashboard) and to authorised hbaze staff who need access for operational or compliance reasons. Transaction records are retained for a minimum of five years from the date of the transaction, in compliance with standard financial record-keeping requirements. After account closure, financial records are retained for the legally required period and then securely deleted.

Cookies and Tracking Technologies

hbaze uses cookies and similar tracking technologies to operate certain platform features and to collect usage data. A cookie is a small data file stored on your device by your browser. The following describes the types of cookies used by hbaze and your options for managing them.

Cookie Type 1
Essential Cookies
Essential cookies are required for the Platform to function. They include your session authentication cookie (which keeps you logged in while you navigate the Platform), CSRF protection tokens, and cookies that remember your language preference. You cannot opt out of essential cookies while using the Platform — without them, the Platform cannot function correctly. These cookies expire at the end of your browser session or after a fixed period as appropriate.
Cookie Type 2
Analytics Cookies
hbaze uses analytics cookies to collect aggregated, anonymised data about how users navigate the Platform — including which pages are most visited, where users encounter errors, and how long users spend on different sections. This data helps hbaze improve the Platform. Analytics data collected through these cookies is processed internally by hbaze and is not shared with any third-party analytics provider. You may disable analytics cookies by adjusting your browser settings. Doing so will not affect Platform functionality.

Data Retention

hbaze retains personal data for only as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory and financial record-keeping requirements. The following general retention periods apply: account registration data is retained for the duration of your account and for a period of five years following account closure; transaction and financial records are retained for a minimum of five years from the date of each transaction; usage and technical logs are retained for up to 12 months and then deleted or anonymised; KYC verification documents are retained for the period required by applicable law from the date of verification .

When personal data is no longer required and no legal retention obligation applies, hbaze will securely delete or irreversibly anonymise the data so that it can no longer be linked to an individual. If you close your hbaze account and request deletion of your personal data, hbaze will process that request within 30 days, subject to any legally required retention periods that prevent earlier deletion.

Your Rights Over Your Data

hbaze recognises that your personal data belongs to you and that you have rights over how it is used and stored. The following rights are available to all registered hbaze users. To exercise any of these rights, contact the hbaze support team using the email address displayed in the footer of this page.

Right 1
Right of Access
You have the right to request a copy of the personal data hbaze holds about you. Upon receiving a valid access request, hbaze will provide a summary of your personal data in a readable format within 15 business days. This includes your registration data, transaction history, and a summary of usage data held in association with your account.
Right 2
Right to Rectification
If any personal data hbaze holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Please contact hbaze support with the specific details you believe are incorrect and the correct information that should replace them. hbaze will action rectification requests within 10 business days of receiving sufficient information to process the request.
Right 3
Right to Erasure
Upon closing your hbaze account, you may request that hbaze delete the personal data it holds about you. hbaze will action erasure requests subject to any legal or regulatory retention obligations that require certain data to be kept for a specified period. Where erasure is not possible due to a legal retention requirement, hbaze will inform you of the specific obligation preventing deletion and the date on which the data will be eligible for deletion.

Data Security Measures

hbaze implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the Platform; encrypted storage of passwords using industry-standard hashing algorithms; access controls ensuring that personal data is accessible only to authorised personnel with a legitimate operational need; regular security reviews of Platform infrastructure; and session timeout mechanisms that automatically log out inactive sessions.

Despite these measures, no online platform can guarantee absolute security. hbaze strongly recommends that all users protect their accounts by choosing a strong, unique password, not sharing their login credentials with anyone, logging out of their account when using shared devices, and contacting hbaze support immediately if they suspect unauthorised account access. hbaze will notify affected users promptly in the event of any data breach that is reasonably likely to result in risk to users' rights or interests.

Security Tip: hbaze will never ask you for your password via email, chat or phone. If you receive any communication claiming to be from hbaze and requesting your password or PIN, treat it as a phishing attempt and report it to our support team immediately.

Children and Minors

The hbaze Platform is strictly for adults aged 21 and above. hbaze does not knowingly collect or process personal data from any person under the age of 21. If hbaze becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe your child has registered an account on hbaze, please contact our support team immediately using the email address in the footer of this page so that we can take prompt action.

Changes to This Privacy Policy

hbaze reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations or Platform features. When this Policy is updated, the revised version will be published on this page with an updated "Last updated" date. Where changes are material, hbaze will take reasonable steps to notify registered users — for example, by displaying a notice on the Platform the next time you log in. Your continued use of the Platform after an updated Policy has been published constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should stop using the Platform and may request account closure by contacting support.

Contact and Privacy Requests

For all privacy-related enquiries, data access requests, rectification requests, erasure requests, or to report a suspected privacy breach, please contact the hbaze data privacy team by email at the address displayed in the footer of every page on this site. Please state clearly in your email the nature of your request, your registered username, and the mobile number associated with your account. hbaze aims to acknowledge all privacy requests within 2 business days and to resolve them within 15 business days.