Hebaje Privacy Policy — How We Keep Your Information Safe

When you HebajeFrom the moment you visit the website or app, protecting your privacy is our highest responsibility. This Privacy Policy ("Policy") clearly explains what information Hebaje collects, why we collect it, and how it is used.

Hebaje believes that data protection is not merely a legal obligation — it is the foundation of trust between us and you. That is why we always adhere to international data protection standards.

This Policy applies to all Hebaje services — web, mobile app, and other digital platforms. By using the platform, you are deemed to have agreed to this Policy.

Hebaje Only necessary data is collected. Full details by category are provided below:

Information provided at the time of registration

• Full name, username & password
• Email Address & Mobile Number
• Date of birth (for age verification)
• Residential address & country

Information Collected for KYC Verification

• Copy of national ID card or passport
• Selfie or live video verification
• Proof of address (utility bill or bank statement)

Financial Information

• Payment method details (bKash/Nagad number, bank information)
• Deposit & withdrawal history
• Transaction date & amount

Gaming Activity Data

• Gaming history, bet amounts & outcomes
• Bonus Usage Information
• Session time & duration

Technical Information

• IP Address & Geographic Location
• Browser type, operating system, device model
• Page visit timestamps & navigation patterns
• Cookies & Session Tokens

Hebaje Collected data is used solely for specified purposes:

Hebaje Never sells your information. However, it may be shared with third parties in the following cases:

• Payment Provider: bKash, Nagad, Rocket, Bank — for completing transactions.
• KYC Service Provider: For identity verification purposes.
• Game Provider: Evolution, Pragmatic, and others — for game operations.
• Law Enforcement Agencies: As required by legal obligation.
• Analytics Partner: For improving services using anonymized data.

All third parties are contractually bound with Hebaje and are required to uphold the same data protection standards. They may only use data for specified purposes.

Hebaje Uses different types of cookies. Each is described below:

Cookies can be managed or deleted at any time through your browser settings. However, disabling certain cookies may affect the proper functioning of some platform features.

Hebaje Your information is retained only for as long as necessary:

• Account Information: For the duration the account is active, and for 5 years after closure.
• Financial Transactions: Up to 7 years for legal purposes.
• KYC Information: Up to 5 years after the end of the relationship.
• Gaming History: 3 years for responsible gaming review purposes.
• Customer Support Chat: 2 years after resolution.
• Marketing Information: Immediate deletion upon withdrawal of consent.

Upon expiry of the retention period, data is securely deleted or anonymized.

You have the following rights regarding your personal information. To exercise these rights, please contact our support:

If a parent suspects their child has registered on Hebaje, please contact our support immediately. We will take action as quickly as possible.

Hebaje Industry-leading technology is used to protect your information:

• 256-bit SSL/TLS Encryption: All data transfers are fully encrypted.
• Two-Factor Authentication (2FA): An additional layer of security for your account.
• Firewall & DDoS Protection: Server infrastructure is secured.
• AI-Powered Fraud Detection: Suspicious activity is detected automatically.
• Regular Security Audits: Annual security review conducted by a third party.
• Data Minimization: Collect only necessary data and apply a minimum access policy.

Hebaje works with global service providers, so in some cases your information may be processed internationally. All such transfers always include:

• Adequate data protection is ensured in the recipient country.
• GDPR standards are followed.
• Contractual protection clauses remain in effect.

Standard Contractual Clauses (SCCs) are used when sharing data with European entities.

Hebaje may update this Privacy Policy from time to time. When changes are made:

• The date of changes will be updated on the website.
• For major changes, advance notice will be sent to your registered email address.
• Continued use of the platform after any changes will be considered acceptance of the updated policy.

We recommend reviewing this policy once every 6 months.

If you have any questions, complaints, or data requests regarding this Privacy Policy, please contact our data protection team:

If you feel we have not adequately resolved your complaint, you have the right to lodge a complaint with the data protection authority in your country.