hbsje Privacy Policy
At hbsje, protecting your personal data is a responsibility we take seriously. This Privacy Policy explains what information we collect from players across Bangladesh, how that information is used, who it is shared with, and what rights you hold over your data. Transparency is central to how we operate.
How hbsje Safeguards Your Information
These six principles form the foundation of how hbsje collects, handles, and protects personal data for every player registered on the platform.
hbsje is an online entertainment platform providing casino games and sports betting services, accessible at hbsje.io. References to "hbsje", "we", "us", or "our" in this Privacy Policy refer to the hbsje platform and its operating entity responsible for the collection and processing of personal data submitted by players.
hbsje is the data controller in respect of the personal data you provide when registering an account, making deposits or withdrawals, engaging with customer support, or otherwise interacting with the platform. As data controller, hbsje determines the purposes and means by which your personal data is processed.
For all data-related enquiries, including requests to exercise your rights or to lodge a complaint, please contact our data protection team at [email protected]. Our support team is available 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).
hbsje collects personal data from you directly — when you register, verify your account, make transactions, or contact support — as well as automatically through your use of the platform. The categories of personal data we collect are described below.
2.1 Registration and Account Data
When you create an hbsje account, we collect the information you provide during the registration process, including:
- Full legal name
- Date of birth (to verify you meet the 21+ minimum age requirement)
- Mobile phone number (used for account verification and 2FA)
- Email address (where provided)
- Preferred username and encrypted password
- City or region of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
2.2 Identity Verification (KYC) Data
To comply with Know Your Customer (KYC) requirements and to prevent underage gambling, money laundering, and fraud, hbsje may request the following documents:
- National Identity Card (NID) number and a copy of the NID document
- Passport or birth certificate (as an alternative to NID where required)
- Proof of address (such as a utility bill or bank statement issued within the last 90 days)
- Selfie or photograph for facial identity verification purposes
2.3 Financial Transaction Data
When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we collect the following transaction-related information:
- Payment method type and associated account or card identifiers (we do not store full card numbers)
- Transaction amount in Bangladeshi Taka (৳)
- Transaction timestamps and reference identifiers
- Deposit and withdrawal history associated with your account
2.4 Technical and Usage Data
When you access the hbsje platform, we automatically collect certain technical data through your device and browser, including:
| Data Type | Description | Purpose |
|---|---|---|
| IP Address | The internet address of your device at time of access | Fraud prevention, geographic access control, security logging |
| Device Type | Mobile, tablet, or desktop; operating system and version | Platform optimisation and technical support |
| Browser Type | Browser name, version, and language settings | Compatibility and user experience improvement |
| Session Data | Pages visited, features used, session duration | Platform analytics and responsible gaming monitoring |
| Geolocation | Approximate location derived from IP address | Restricted jurisdiction detection |
| Referral Source | URL or channel through which you arrived at hbsje.io | Marketing attribution and platform analytics |
2.5 Communications Data
When you contact our support team via live chat or email, we retain a record of your communications, including the content of your messages, the date and time of contact, and the resolution of any query or complaint. This data is used to maintain service quality and to resolve disputes if they arise.
hbsje uses the personal data we collect for clearly defined and lawful purposes. We do not use your personal data for any purpose that is incompatible with the purposes listed below without first informing you and, where required, obtaining your consent.
- Account creation and management: Processing your registration, verifying your identity, managing your account settings, and maintaining your account balance and transaction history
- Service delivery: Providing access to casino games, sports betting markets, live dealer games, and all other platform features available on hbsje
- Payment processing: Facilitating deposits and withdrawals via your chosen payment method, reconciling transactions, and investigating disputed or failed transactions
- Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multiple account abuse, and any other activity that violates our Terms & Conditions or applicable law
- Legal and regulatory compliance: Fulfilling KYC obligations, age verification requirements, anti-money-laundering (AML) obligations, and any other legal or regulatory duties applicable to the operation of the hbsje platform
- Responsible gaming: Monitoring player behaviour for signs of problem gambling, applying account limits or restrictions where appropriate, and communicating responsible gaming information and tools to players
- Customer support: Responding to your queries, complaints, and requests; providing technical assistance; and maintaining records of support interactions for quality assurance
- Platform improvement: Analysing aggregated usage data to improve the functionality, design, and content of the hbsje platform
- Promotional communications: Where you have given explicit consent, sending you personalised promotional offers, bonus notifications, and platform updates via SMS or email. You may withdraw this consent at any time
hbsje processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:
- Contractual necessity: Processing is necessary to perform the contract between you and hbsje — for example, creating and managing your account, processing deposits and withdrawals, and providing access to games
- Legal obligation: Processing is required to comply with legal and regulatory requirements, including KYC identity verification, age verification, and anti-money-laundering obligations
- Legitimate interests: Processing is necessary for hbsje's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your rights and freedoms
- Consent: Where processing is based on your consent — for example, for promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal
The hbsje platform uses cookies and similar tracking technologies to support the operation of the website, enhance your user experience, and gather analytical data about how the platform is used. A cookie is a small text file placed on your device when you visit a website.
5.1 Types of Cookies We Use
- Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable core features such as session management, login authentication, and security token validation. These cookies cannot be disabled without affecting the functionality of the platform
- Performance and Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors interact with the hbsje platform — such as which pages are most frequently visited and how long sessions last. This data is used to improve platform performance and user experience
- Functional Cookies: These cookies remember your preferences — such as your language settings and display preferences — to provide a more personalised experience on return visits
- Targeting and Session Cookies: These short-lived cookies are used to maintain your active session and to associate your activity with your account for security and responsible gaming monitoring purposes
5.2 Managing Cookies
You can manage or disable cookies through the settings of your browser. Please note that disabling strictly necessary cookies will impair your ability to use key features of the hbsje platform, including logging in and making transactions. Instructions for managing cookies in popular browsers are available in the help documentation for your specific browser.
hbsje does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your information only in the following specific and limited circumstances:
- Payment processors: We share necessary transaction data with payment service providers — including bKash, Nagad, Rocket, Upay, and card processing networks — solely for the purpose of processing your deposits and withdrawals
- Identity verification providers: We may use third-party KYC and identity verification services to validate your identity documents and confirm your age. These providers process your data only for verification purposes and are bound by confidentiality obligations
- Game providers: Game studios such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming may receive limited technical data (such as a pseudonymous player identifier and bet history) necessary to operate the games you play. These providers do not receive your full personal profile
- Fraud prevention and security services: We may share data with third-party fraud detection and cybersecurity services to identify and prevent fraudulent activity, unauthorised access, and abuse of the platform
- Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of hbsje, its players, or the public
- Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the hbsje business, personal data held by hbsje may be transferred to the relevant successor entity, subject to the same privacy protections described in this policy
All third parties with whom hbsje shares personal data are required to implement appropriate technical and organisational security measures, and are permitted to use the data only for the specific purpose for which it was shared.
hbsje's platform infrastructure and some of our third-party service providers may be located in countries outside Bangladesh. When personal data is transferred outside of Bangladesh, hbsje takes appropriate measures to ensure that your data continues to be protected to a standard consistent with this Privacy Policy.
Such measures may include entering into data transfer agreements with recipient entities that incorporate standard contractual clauses or equivalent protections, and selecting service providers that maintain internationally recognised data security standards and certifications.
By using the hbsje platform, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions outside Bangladesh for the purposes described in this Privacy Policy.
hbsje retains your personal data for as long as your account remains active and for a defined period following account closure, as described below. Our retention periods are based on the purpose for which the data was collected, the nature of the data, and any applicable legal or regulatory obligations that require us to retain certain records.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation / contractual |
| KYC identity documents | Duration of account + 5 years post-closure | AML and regulatory obligation |
| Financial transaction records | Duration of account + 7 years post-closure | Financial regulatory obligation |
| Betting and gaming history | Duration of account + 3 years post-closure | Dispute resolution / legitimate interest |
| Customer support communications | 3 years from date of interaction | Legitimate interest / dispute resolution |
| Technical and usage data (logs) | 12 months from collection | Legitimate interest / security |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent / legal obligation |
Once the applicable retention period has elapsed, personal data is securely deleted or irreversibly anonymised. Anonymised data — which can no longer identify you — may be retained for statistical and analytical purposes without limitation.
As an hbsje player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within 30 days of receiving your request.
- Right of Access: You have the right to request a copy of all personal data that hbsje holds about you, along with information about how that data is being used and with whom it has been shared
- Right to Rectification: You have the right to request that inaccurate or incomplete personal data held about you be corrected or updated without undue delay
- Right to Erasure: In certain circumstances, you have the right to request that hbsje delete your personal data. This right is subject to limitations where retention is required by law or is necessary to defend against legal claims
- Right to Restrict Processing: You have the right to request that hbsje restrict the processing of your personal data in specific circumstances — for example, while a rectification request is being assessed
- Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format
- Right to Object: You have the right to object to processing of your personal data where hbsje relies on legitimate interests as the legal basis, including profiling based on those interests
- Right to Withdraw Consent: Where processing is based on your consent — such as for receiving promotional communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing
The hbsje platform is strictly intended for adults aged 21 years and above. hbsje does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration process, and all accounts are subject to KYC verification prior to the processing of any withdrawal.
If hbsje becomes aware that personal data has been collected from a person under the age of 21, the associated account will be immediately suspended, all funds will be frozen pending investigation, and the personal data collected will be securely deleted in accordance with our data retention procedures.
If you have reason to believe that a minor is using or has registered an hbsje account, please contact our support team immediately at [email protected]. We will investigate and take appropriate action within 24 hours (BST).
hbsje implements a comprehensive set of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include but are not limited to:
- 256-bit SSL/TLS encryption for all data in transit between your device and the hbsje platform
- Encrypted storage of passwords using industry-standard hashing algorithms; plain-text passwords are never stored
- Two-factor authentication (2FA) via SMS OTP, available to all players and strongly recommended for account security
- Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
- Regular internal security audits and vulnerability assessments of platform infrastructure
- Intrusion detection and prevention systems monitoring platform traffic in real time (BST)
- Automatic session timeout after a period of inactivity to reduce the risk of unauthorised access from shared devices
- Secure deletion protocols applied when personal data reaches the end of its retention period
Despite our best efforts, no method of data transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights, hbsje will notify affected players and take all reasonable steps to contain and remediate the breach as quickly as possible.
You also play a role in keeping your data secure. You are responsible for maintaining the confidentiality of your hbsje login credentials and for ensuring that you log out of your account when using shared or public devices. If you suspect your account has been compromised, contact our support team immediately.
The hbsje platform may contain references to or integrations with third-party services — such as payment gateways for bKash, Nagad, and Rocket — that operate under their own privacy policies. When you are redirected to a third-party service to complete a payment transaction, you are subject to that service's privacy practices for the duration of that interaction.
hbsje is not responsible for the privacy practices, data handling, or content of any third-party websites or services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of hbsje, particularly payment providers whose interfaces you access to complete deposit or withdrawal transactions.
hbsje reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When a material change is made to this policy, we will update the effective date displayed at the top of this page and, where reasonably practicable, notify active players by email or via an in-account notification.
Your continued use of the hbsje platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the changes, you should discontinue use of the platform and may request account closure as described in our Terms & Conditions.
We encourage you to review this Privacy Policy periodically to stay informed about how hbsje collects, uses, and protects your personal data. The version currently published on this page is the version in force as of the effective date shown above.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way hbsje handles your personal data, please contact our data protection and support team using the details below. All communications should be in English.
- Email: [email protected] (plain text only — do not include sensitive financial information in emails)
- Live Chat: Available 24/7 from within your hbsje account dashboard
- Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
- Response Time: Live chat within 5 minutes; email responses within 48 hours (BST)
For formal data subject access requests, rectification requests, erasure requests, or objections to processing, please submit your request by email to [email protected] with the subject line "Data Rights Request" and include your registered mobile number and full name so we can verify your identity before processing the request.