hibagi Privacy Policy

1. Introduction

hibagi ("we", "us", "our") operates the online betting and casino platform accessible at hibagi.biz, which is made available to users based in Bangladesh and other permitted jurisdictions. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

We are committed to protecting and respecting your privacy. Please read the following carefully to understand our practices regarding your personal data and how we will treat it. This policy applies to all users who access hibagi.biz, whether as a registered account holder or as a visitor who has not yet registered.

By accessing the hibagi platform or creating an account, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree with any aspect of this policy, you should not access or use the hibagi platform.

2. Definitions

For the purposes of this Privacy Policy:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including name, date of birth, email address, mobile number, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Subject" means the individual whose personal data is being processed — in this context, the hibagi user.
• "Third Party" means any individual or organisation other than the data subject and hibagi, including payment processors such as bKash, Nagad, Rocket, and Upay.
• "KYC" means Know Your Customer — the identity verification process required by anti-money-laundering regulations and hibagi's internal compliance framework.
• "Cookies" means small text files placed on a user's device by the hibagi website to facilitate session management, analytics, and user experience improvements.

3. Data We Collect

hibagi collects the following categories of personal data from users:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — 18+ requirement)
• Residential address (including city, district, and postcode)
• Email address
• Mobile phone number
• Username chosen by the user

3.2 Identity Verification (KYC) Documents

• National Identity Card (NID) number and scan or photograph
• Passport or other government-issued photo ID where submitted
• Proof of address documents where requested

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts in BDT, timestamps, method used)
• Payment method identifiers — bKash wallet number, Nagad number, Rocket number, Upay number, or bank account reference
• Betting and gaming transaction history (stakes, odds, outcomes, game types)

3.4 Technical & Usage Data

• IP address and geolocation data derived from IP
• Device type, operating system, and browser information
• Session timestamps and duration
• Pages visited, features accessed, and navigation patterns within the hibagi platform
• Referring URL (the page or source from which you arrived at hibagi.biz)

3.5 Communications Data

• Support ticket content and email correspondence with the hibagi support team
• Preferences you have expressed in relation to marketing communications

hibagi does not collect or store sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than the facial image on identity documents submitted for KYC), or health-related data, unless specifically required to fulfil a legal obligation.

4. How We Collect Data

We collect personal data through the following means:

• Direct submission: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal request, or contacting support.
• Automated collection: Technical and usage data collected automatically when you access hibagi.biz, via server logs, cookies, and similar tracking technologies described in Section 10.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when you initiate a deposit or withdrawal.
• Identity verification partners: Where hibagi engages a third-party KYC verification service, that service may return verification status and identity data to hibagi for the purpose of completing the account verification process.

5. Lawful Basis for Processing

hibagi processes personal data on the following lawful bases:

Processing Activity	Lawful Basis
Creating and managing your hibagi account	Contractual necessity
Processing deposits and withdrawals via bKash, Nagad, Rocket	Contractual necessity
Identity verification (KYC) and age verification (18+)	Legal obligation
Anti-money-laundering transaction monitoring	Legal obligation
Fraud detection and security monitoring	Legitimate interests
Platform analytics and performance improvement	Legitimate interests
Responsible gaming monitoring and self-exclusion enforcement	Legal obligation / Legitimate interests
Sending promotional communications (opt-in only)	Consent

6. How We Use Your Data

hibagi uses the personal data we collect for the following purposes:

• To create, maintain, and administer your hibagi account, including processing your login, managing your BDT balance, and recording your betting and gaming history.
• To process financial transactions — deposits via bKash, Nagad, Rocket, Upay, and local bank transfer, and withdrawal requests to your nominated payment method.
• To verify your identity and age (18+) in compliance with KYC requirements and to prevent underage gambling.
• To detect, investigate, and prevent fraud, money laundering, prohibited conduct, and any other activity that may compromise the security or integrity of the hibagi platform.
• To enforce the hibagi Terms & Conditions and respond to breaches.
• To provide customer support and respond to queries submitted via [email protected].
• To send you account-related communications, such as deposit confirmations, withdrawal updates, security alerts, and policy change notifications.
• To send you promotional communications where you have opted in to receive them, subject to your right to withdraw consent at any time.
• To monitor and enforce responsible gaming obligations, including processing self-exclusion requests and deposit limit settings.
• To analyse platform usage and improve the hibagi user experience for players based in Bangladesh and other served markets.
• To comply with applicable legal obligations and respond to lawful requests from competent authorities.

7. Sharing Your Data

7.1  hibagi does not sell, rent, or commercially transfer your personal data to third parties. We share personal data only in the following circumstances:

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, and banking partners (including Dutch-Bangla Bank, City Bank, BRAC Bank) strictly as necessary to process your deposits and withdrawals. These providers process data under their own terms of service and privacy policies.
• KYC and identity verification providers: Where an external KYC verification service is used, the identity documents you submit may be shared with that provider solely for the purpose of completing your account verification.
• Game providers: Technical session data (such as session tokens and game round identifiers) may be exchanged with third-party game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi to enable live casino and slot game functionality. These providers do not receive your full personal profile.
• Legal and regulatory disclosures: hibagi may disclose personal data to law enforcement authorities, financial intelligence units, or other competent bodies where required to do so by applicable law or a lawful order.
• Business continuity: In the event of a business transfer, merger, or acquisition involving hibagi, user data may be transferred to the acquiring entity subject to equivalent data protection obligations.

7.2  All third parties to whom hibagi discloses personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection obligations. hibagi does not permit third-party service providers to use your data for their own marketing purposes.

8. Data Retention

8.1  hibagi retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention periods:

• Account data and KYC documents: Retained for a minimum of 5 years from the date of account closure or last transaction, in compliance with standard anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the relevant transaction.
• Support correspondence: Retained for 3 years from the date of the final communication in the relevant support case, unless a longer period is required by a legal obligation or ongoing dispute.
• Technical and usage data (logs): Retained for up to 12 months, after which it is aggregated, anonymised, or deleted.
• Marketing consent records: Retained for the duration of your opt-in consent and for 12 months following any withdrawal of consent, for evidential purposes.

8.2  Where you request deletion of your personal data and hibagi has no outstanding legal obligation to retain it, we will action the deletion request within 30 days of receipt of the verified request.

9. Your Rights

9.1  Subject to applicable law, you have the following rights in relation to your personal data held by hibagi:

• Right of Access: Request a copy of the personal data hibagi holds about you, free of charge, within 30 days of a verified request.
• Right of Rectification: Request correction of inaccurate or incomplete personal data. You may also update some data directly within your hibagi account settings.
• Right of Erasure ("Right to be Forgotten"): Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal retention obligation applies.
• Right to Restriction of Processing: Request that hibagi suspends or limits processing of your data in specific circumstances, such as while a rectification request is under review.
• Right to Data Portability: Request a copy of the personal data you have provided to hibagi in a structured, machine-readable format, where the processing is based on consent or contractual necessity.
• Right to Object: Object to processing based on hibagi's legitimate interests, including objecting to receipt of direct marketing communications. Marketing opt-outs take effect immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

9.2  To exercise any of the above rights, please contact the hibagi data team at [email protected] with the subject line "Data Rights Request" and your registered account username. We will acknowledge your request within 3 business days and fulfil it within 30 days, or notify you if an extension is required.

10. Cookies & Tracking Technologies

10.1  hibagi uses cookies and similar tracking technologies on hibagi.biz to enable core platform functionality, improve performance, and analyse user behaviour. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the hibagi platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences, such as your preferred language or display settings, to personalise your experience on the platform.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate hibagi.biz to help us improve the platform. No personally identifiable information is transmitted to analytics services.

10.2  You may control non-essential cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or receive a notification when a new cookie is set. Disabling functional or analytics cookies may affect the performance of certain platform features but will not prevent you from accessing core betting and casino services.

11. Security Measures

11.1  hibagi implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and hibagi.biz.
• Encryption at rest for sensitive data including KYC documents and payment method references stored on hibagi servers.
• Role-based access controls limiting access to personal data to authorised hibagi personnel with a documented operational need.
• Regular internal security reviews of systems and processes that handle personal data.
• Incident response procedures to detect, assess, and respond to personal data breaches in a timely manner.

11.2  While hibagi takes all reasonable steps to protect your personal data, no internet-based system can be guaranteed to be entirely secure. You are responsible for maintaining the security of your hibagi login credentials and for notifying support immediately if you suspect unauthorised access to your account.

12. Minors

12.1  The hibagi platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Age verification is applied at the point of account registration and during the KYC process as a mandatory safeguard.

12.2  If hibagi becomes aware that personal data has been collected from an individual who is under the age of 18, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered on the hibagi platform, please notify us at [email protected] immediately.

13. Changes to This Policy

13.1  hibagi may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Where updates are material, we will notify registered users by email to their registered address and/or by a prominent notice on the hibagi platform prior to the changes taking effect.

13.2  The "Last Updated" date at the top of this document reflects the date of the most recent revision. Continued use of the hibagi platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated policy. The current version of this policy is always available at hibagi.biz/privacy-policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by hibagi, please contact us using the following details:

• Email: [email protected]
• Subject line for data requests: "Privacy Enquiry" or "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Acknowledgement within 3 business days; resolution within 30 days

hibagi treats all privacy-related enquiries with priority. Where a complaint cannot be resolved through direct contact with our support team, it will be escalated internally to a senior compliance review within 48 hours of acknowledgement.