hajee Privacy Policy

When you interact with the hajee platform — whether by browsing the website, registering an account, making a deposit, placing a bet, or contacting support — we may collect personal data across several categories. Below is a detailed breakdown of what we collect and the source from which it originates.

1.1 Registration and identity data

When you create a hajee account, we collect: your full legal name, date of birth, email address, Bangladesh mobile number, and a username of your choice. If identity verification is required (for example, prior to a large withdrawal), we may also collect a copy of a government-issued identity document such as a National Identity Card (NID) or passport, and a recent proof of address document.

1.2 Financial and payment data

To process deposits and withdrawals, we collect the details necessary to complete the transaction via your chosen payment method. For bKash, Nagad, Rocket, and Upay transactions, this includes your registered mobile wallet number. For bank transfers, this includes your bank account number, bank name, and account holder name. For card payments via Visa or Mastercard, we collect the card number (stored in truncated form — last 4 digits only), expiry date, and billing name. We do not store full card numbers or CVV/CVC codes on our servers; full card data is handled exclusively by our PCI-DSS-compliant payment processing partners.

1.3 Usage and behavioural data

As you use the hajee platform, we automatically collect technical and behavioural data including: your IP address, device type, operating system, browser type and version, screen resolution, pages visited, time spent on each page, games played, bet amounts and frequency, session start and end times, and click/interaction patterns. This data is collected via server logs, cookies, and analytics tools.

1.4 Communications data

When you contact hajee support via email, live chat, or any other channel, we retain a record of that communication including the content of messages, timestamps, and any attachments you provide. This record is used to track the resolution of your query and to improve our support quality.

1.5 Responsible gaming data

If you use hajee's responsible gaming tools — such as setting deposit limits, requesting a cooling-off period, or applying for self-exclusion — we record those requests and the settings applied. This data is treated with heightened sensitivity and is used solely to enforce the protections you have requested.

hajee processes your personal data for specific, clearly defined purposes. We do not use your data for any purpose incompatible with the original reason for which it was collected without first obtaining your explicit consent or establishing a fresh legal basis for processing.

2.1 Account management and service delivery

Your registration data is used to create and maintain your hajee account, verify your identity, authenticate your login sessions, process your bets and game rounds, and deliver your winnings to your chosen payment method. This processing is necessary for the performance of the contract between you and hajee and cannot be opted out of while you hold an active account.

2.2 Payment processing and fraud prevention

Financial data is processed to complete deposit and withdrawal transactions, to detect and prevent fraudulent payment activity, and to comply with anti-money laundering (AML) obligations. hajee uses automated systems to flag unusual transaction patterns. Where a flag is raised, a human reviewer will assess the account before any action is taken.

2.3 Regulatory compliance and legal obligations

hajee is required to retain certain categories of player data — including identity documents, transaction records, and account activity logs — to fulfil legal and regulatory obligations. This includes obligations related to AML compliance and age verification requirements. Processing for this purpose is based on a legal obligation and cannot be withdrawn by the player.

2.4 Platform security and integrity

Technical and behavioural data is used to monitor for suspicious activity, detect the use of automated tools (bots), identify multi-account behaviour, and protect the integrity of games and sports betting markets. Where a security concern is identified, the data may be reviewed by a member of the hajee security team.

2.5 Responsible gaming monitoring

Betting frequency, session duration, deposit patterns, and account activity data are used by hajee's responsible gaming systems to identify players who may be showing early signs of problem gambling behaviour. Where a concern is identified, hajee may reach out proactively to the player with support information. See the Responsible Gaming page for full details.

2.6 Customer support

Communications data from support interactions is used to resolve your queries, train our support team, and improve the quality of assistance provided to all players. Support records are retained for 24 months following the closure of a support ticket.

2.7 Marketing communications

If you have provided consent to receive marketing communications from hajee (for example, by opting in during registration or via your account settings), we may use your email address and mobile number to send you information about promotions, bonuses, new game launches, and seasonal offers relevant to Bangladeshi players — such as BPL betting promotions or Eid special offers. You can withdraw your marketing consent at any time by updating your account notification preferences or by emailing [email protected] with the subject line "Unsubscribe".

2.8 Platform analytics and improvement

Aggregated and anonymised usage data is used to analyse platform performance, identify pages with high bounce rates, improve navigation structure, and prioritise new feature development. Anonymised data used for analytics purposes cannot be used to re-identify individual players.

hajee does not sell, rent, or otherwise commercially transfer your personal data to third parties. However, to operate the platform effectively and comply with our legal obligations, we share data with a limited set of trusted third-party partners in the categories described below.

3.1 Payment service providers

When you make a deposit or withdrawal, the minimum necessary payment data is shared with the relevant payment service provider — such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, or our card processing partner. These providers process the transaction on our behalf and are contractually bound to handle your data in accordance with applicable data protection standards. They are not permitted to use your data for any purpose other than completing the transaction.

3.2 Identity verification services

Where KYC document verification is required, identity documents (NID, passport, proof of address) may be shared with a specialist identity verification service provider. These providers are engaged under strict data processing agreements and are certified to handle sensitive identity data securely.

3.3 Game studios and content providers

When you play a game hosted by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — your player session data (including your account identifier, bet amounts, and game results) is shared with that studio to facilitate the game session. Game studios do not receive your name, NID, or payment details. The data shared is limited to what is technically necessary to run the game session.

3.4 Legal and regulatory disclosure

hajee may be required to disclose player data to law enforcement agencies, financial intelligence units, or other relevant authorities where we receive a lawful request to do so, or where we are otherwise required by applicable law. We will notify affected players of such disclosure where we are legally permitted to do so.

3.5 Business transfers

In the event that hajee undergoes a merger, acquisition, or sale of all or a material part of its business assets, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer and will have the option to close their account before the transfer is completed if they do not wish their data to be transferred.

hajee uses cookies and similar tracking technologies on the hajee.app website. A cookie is a small text file that is placed on your device when you visit a website. Cookies allow the website to recognise your device, maintain your session, remember your preferences, and collect analytical data about how the site is used.

4.1 Types of cookies we use

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, keep your account secure during a session, and ensure that bets and transactions are correctly attributed to your account. You cannot opt out of strictly necessary cookies while using the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and last visited game category — so that you do not need to re-enter them on each visit.
• Analytical cookies: These cookies collect anonymised data about how players navigate the platform — which pages are visited most frequently, where players drop off, and how long sessions typically last. This data is used exclusively to improve the platform and is not linked to individual player profiles.
• Security cookies: These cookies support our fraud detection systems. They help identify suspicious login attempts, unusual geographic access patterns, and potential bot activity by correlating session behaviour with expected usage patterns for your account.

4.2 Managing your cookie preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to: view the cookies currently stored on your device; delete all cookies or cookies from specific websites; block third-party cookies; and receive a notification before a new cookie is set.

Please note that disabling functional or analytical cookies may affect your experience on the platform — for example, your language preference may not be saved between sessions. Disabling strictly necessary cookies will prevent you from logging in and using the platform.

4.3 Local storage and session storage

In addition to cookies, hajee may use browser local storage and session storage to maintain short-term application state data — such as your current game session state or pending bet slip contents. This data is stored entirely on your device and is cleared when you close your browser session (session storage) or when you clear your browser data (local storage).

hajee retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory obligations. The table below sets out the standard retention periods for each category of data.

Geographic storage: hajee stores player data on secure servers. All data is handled in accordance with applicable data protection standards. Where data is processed by a third-party service provider located outside Bangladesh, that provider is contractually required to maintain data protection standards at least equivalent to those applied by hajee.

Account closure and deletion: When a player requests account closure, their account is deactivated immediately. Personal data is anonymised or deleted in accordance with the retention periods set out above. Note that data subject to legal hold periods (such as transaction records) cannot be deleted before the applicable retention period expires, even at the player's request.

As a hajee player, you hold a set of rights with respect to the personal data we hold about you. hajee is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Data Rights Request". Please include your registered username and a description of the right you wish to exercise.

We will acknowledge your request within 5 business days and will provide a substantive response — or request any additional information needed to verify your identity — within 30 days of receipt.

hajee implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. No online platform can guarantee absolute security, but hajee maintains security practices consistent with industry standards for online gaming platforms operating in the Bangladesh market.

7.1 Encryption in transit and at rest

All data transmitted between your browser or device and the hajee.app platform is encrypted using TLS 1.2 or higher. You can verify this by checking for the padlock icon in your browser's address bar. Sensitive data stored on our servers — including identity documents, payment records, and account credentials — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from encrypted data and are rotated on a regular schedule.

7.2 Access controls

Access to player data within hajee's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their role. All internal access to player accounts is logged and subject to periodic audit. Administrative access to production systems requires multi-factor authentication (MFA) and is restricted to approved personnel operating from secured environments.

7.3 Account security — your responsibilities

The security of your hajee account also depends on the steps you take to protect your login credentials. hajee strongly recommends the following practices:

• Use a unique, strong password for your hajee account — do not reuse passwords from other websites.
• Never share your password with anyone, including hajee support staff. hajee staff will never ask you for your password.
• Log out of your account when using a shared or public device.
• Contact [email protected] immediately if you suspect your account has been accessed without your authorisation.
• Keep the email address and mobile number associated with your account up to date so that account recovery is possible if needed.

7.4 Incident response

hajee maintains a documented data breach response procedure. In the event of a security incident that results in — or is likely to result in — unauthorised access to player data, hajee will: (a) contain the incident and assess its scope as rapidly as possible; (b) notify affected players directly via their registered email address without undue delay; and (c) take remedial action to prevent recurrence. Where required by applicable law, hajee will also report the incident to the relevant regulatory authority.

hajee reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. When a material change is made to this policy, we will notify registered players via the email address associated with their account at least 14 days before the updated policy takes effect.

The "Last updated" date displayed at the top of this page will be revised each time this policy is amended. We encourage you to review this page periodically so that you remain informed about how your data is being handled.

Continued use of the hajee platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should close your account before the updated policy takes effect.

8.1 Minor updates

Corrections of typographical errors, clarifications that do not alter the substance of data processing activities, and updates to contact details are considered minor amendments and may be made without advance player notification, though the "Last updated" date will still be revised.

8.2 Contact the hajee data team

For any query, concern, or formal request relating to your personal data and how hajee handles it, please contact our support team using the details below. Clearly mark your message with the nature of your enquiry (e.g., "Data Rights Request", "Privacy Query", "Cookie Concern") to ensure it is routed to the correct team member.

• Email: [email protected]
• Response time: Acknowledgement within 5 business days; substantive response within 30 days.
• Language: All privacy-related correspondence is handled in English.
• Available: 24 hours a day, 7 days a week.