hxbaji Privacy Policy

hxbaji collects personal data from players in Bangladesh through several distinct channels: directly via the registration form, through ongoing use of the platform, through payment processing interactions, and through automated technical systems such as cookies and server logs. The categories of personal data we collect are described below.

1.1 Registration & Identity Data

When you create an account on hxbaji, we collect the following information:

• Full legal name
• Date of birth (used to verify that you meet the 18+ age requirement)
• Country and city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Mobile phone number
• Email address
• Username and encrypted password
• Referral source (how you found hxbaji)

1.2 KYC Identity Verification Data

To comply with our Know Your Customer (KYC) obligations and to prevent fraud and underage gambling, we may collect copies of identity documents including your National Identity Card (NID), passport, driving licence, proof of address, and mobile wallet or bank statements. These documents are processed securely and are used solely for the purposes of verification.

1.3 Financial & Payment Data

hxbaji collects payment-related data in order to process your deposits and withdrawals. This includes mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details where bank transfer is used, transaction amounts, timestamps, and payment method identifiers. Full card numbers for Visa and Mastercard transactions are handled exclusively by our certified payment processor and are not stored on hxbaji's own systems.

1.4 Usage & Behavioural Data

As you use the hxbaji platform, we collect data about your activity including the games you play, the sports markets you browse and bet on, your session duration and frequency, search queries within the platform, and in-platform communication with our support team via live chat. This data is used to improve platform performance and personalise your experience.

1.5 Technical & Device Data

Our servers automatically collect certain technical data each time you access hxbaji.net, including:

hxbaji uses the personal data we collect for the following specific, documented purposes. We do not use your data in any way that is incompatible with the purposes listed below without first obtaining your explicit consent or being legally required to do so.

2.1 Account Management & Service Delivery

Your registration data and identity information is used to create and maintain your hxbaji account, authenticate your login sessions, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment methods, and deliver the core sports betting and casino gaming services you have signed up for.

2.2 Identity Verification & Fraud Prevention

hxbaji uses KYC data and behavioural monitoring to verify player identities, enforce our 18+ age restriction, detect and prevent fraudulent activity, bonus abuse, match-fixing involvement, and money laundering. This processing is a legal obligation as well as a platform safety measure, and we have a legitimate interest in protecting other players from the harm that fraud and account manipulation cause.

2.3 Responsible Gaming Monitoring

We use session data, betting frequency data, and deposit/withdrawal patterns to identify players who may be exhibiting signs of problem gambling. Where our responsible gaming monitoring system flags a concern, a member of our support team may reach out to offer assistance. Players may also use our self-exclusion and deposit limit tools at any time — see our Responsible Gaming page for details.

2.4 Customer Support

When you contact hxbaji's support team via live chat or email, your query content and account details are accessed by our support agents for the purpose of resolving your issue. Support conversations are logged and retained as described in Section 6 (Data Retention Policy).

2.5 Platform Improvement & Analytics

Aggregated and anonymised usage data is used internally to identify popular game categories, optimise page load performance, improve the mobile experience for players across Bangladesh, and develop new product features. This analytics processing does not identify you personally — it is performed on anonymised data sets.

2.6 Marketing Communications

If you have opted in to receive marketing communications during registration or through your account preferences, hxbaji may send you promotional emails or in-platform notifications about new games, seasonal bonuses (such as BPL season promotions, Eid special offers, or Pohela Boishakh giveaways), and platform updates. You may unsubscribe from marketing communications at any time by contacting our support team or updating your account notification preferences.

hxbaji uses cookies and similar tracking technologies on hxbaji.net to support platform functionality, improve user experience, and gather anonymised analytics data. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies themselves do not contain personally identifiable information, but they may be linked back to your account data when you are logged in.

3.1 Types of Cookies We Use

3.2 Managing Cookies

You may control and delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent certain features of hxbaji from functioning correctly — including the login system and active game sessions. Disabling analytics or functional cookies will not impair your ability to place bets or play games but may reduce the personalisation of your experience on the platform.

hxbaji does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.

4.1 Payment Processing Partners

To process your deposits and withdrawals, hxbaji shares transaction data with approved payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard network processors. These partners receive only the data they require to execute the specific transaction — typically your wallet identifier or masked card details and the transaction amount. All payment partners are contractually bound to process your data in accordance with applicable data protection standards and are strictly prohibited from using your data for any purpose other than transaction processing.

4.2 Game Content Providers

Casino games and live dealer experiences on hxbaji are delivered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, Ezugi, and Spribe. These providers receive a pseudonymous player identifier (not your real name or email) to facilitate game session management. They do not receive your full registration profile, payment details, or KYC documents.

4.3 KYC & Identity Verification Services

Where hxbaji employs third-party identity verification technology to assist with KYC processing, the documents and biometric data you submit during verification may be processed by that provider's secure systems. All such providers are vetted for data security compliance before being engaged. Your documents are not retained by the verification provider beyond the period required to complete the verification check.

4.4 Legal & Regulatory Disclosure

hxbaji may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are compelled to do so by a valid legal obligation — such as a court order, government investigation, or mandatory anti-money laundering (AML) reporting requirement. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and will notify you of the disclosure where we are legally permitted to do so.

4.5 Business Transfers

In the unlikely event that hxbaji undergoes a corporate restructuring, acquisition, or merger, player data may form part of the transferred assets. In such circumstances, hxbaji will notify registered players in advance via their registered email address, and any successor entity will be bound to honour this Privacy Policy or provide players with the opportunity to request account deletion before the transfer takes effect.

hxbaji employs a multi-layered approach to data security, designed to protect your personal information against unauthorised access, accidental loss, disclosure, and destruction. While no online platform can guarantee absolute security, we implement industry-leading technical and organisational safeguards that reflect the sensitivity of the data we hold.

5.1 Technical Safeguards

• 256-bit SSL/TLS Encryption: All data in transit between your browser and our servers is encrypted using TLS 1.2 or higher.
• Encrypted Data Storage: Sensitive data — including identity documents, payment identifiers, and password hashes — is encrypted at rest using AES-256 encryption.
• Password Hashing: Passwords are never stored in plain text. We use a one-way cryptographic hashing algorithm with per-account salting.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their hxbaji accounts for an additional layer of login security.
• Firewalls & Intrusion Detection: Our server infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for anomalous access patterns 24/7.
• Regular Penetration Testing: hxbaji commissions periodic independent security audits and penetration tests to identify and address potential vulnerabilities before they can be exploited.

5.2 Organisational Safeguards

Access to player personal data within hxbaji is restricted on a strict need-to-know basis. Only personnel with a documented operational requirement — such as support agents handling an active query or compliance staff conducting a KYC review — are granted access to identifiable player data. All staff with data access are subject to confidentiality obligations and receive regular data protection training.

5.3 Reporting a Security Concern

If you believe your hxbaji account has been accessed without your authorisation, or if you discover a potential security vulnerability on hxbaji.net, please contact our support team immediately via live chat. Our security team is available around the clock (BST, UTC+6) and treats all security reports as high priority. Platform email for security concerns: [email protected] (plain text — not a clickable link).

hxbaji retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The table below summarises the retention periods applicable to each major category of player data.

At the end of the applicable retention period, personal data is either permanently deleted from hxbaji's systems or irreversibly anonymised so that it can no longer be associated with any individual player. Anonymised aggregate data (e.g., overall platform usage statistics that do not identify individuals) may be retained indefinitely for business analytics purposes.

As a registered player on hxbaji, you hold the following rights in relation to your personal data. These rights can be exercised at any time by contacting our support team via live chat or by emailing [email protected] (plain text — not a clickable link). We will acknowledge all requests within 72 hours and respond in full within 30 calendar days.

Please note that some of the rights listed above are subject to limitations where hxbaji has a legal obligation to retain or continue processing certain data. In such cases, we will clearly explain the basis for any limitation when we respond to your request.

hxbaji reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, platform features, or payment methods. The most current version of this policy will always be available at hxbaji.net/privacy-policy and will display a "Last reviewed" date at the top of the page.

Where a change to this policy is material — meaning it meaningfully affects how we collect, use, or share your personal data — hxbaji will notify you in advance via your registered email address or through an in-platform notification. Your continued use of hxbaji following the effective date of any updated policy constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a suspected data protection concern, please contact our support team. We are available 24/7 on Bangladesh Standard Time (BST, UTC+6) and are committed to responding to all privacy-related enquiries promptly and thoroughly.

Platform contact email: [email protected] (plain text — not a clickable link).