Privacy Policy – How Hibajj Keeps Your Data Safe

Hibajj (hibajj.app) is a trusted online betting platform for users in Bangladesh. We believe privacy is a fundamental right for every user — which is why our Privacy Policy is built on complete transparency, so you always know exactly what we do with your information.

This Privacy Policy applies to the Hibajj website, mobile site, and all related services. By using any Hibajj service, you are considered to have accepted this Privacy Policy.

Our Privacy Policy may be updated at any time. When changes are made, the date at the top of the page will be updated, and registered users will be notified by email for any significant changes.

Various types of information are collected when you create an account and use our services at Hibajj. Full details are provided below:

We do not collect any information beyond what is listed above. Every piece of data we collect has a specific and legitimate purpose. Hibajj never collects additional information without your consent.

Hibajj uses collected data only for specific purposes. Below we clearly explain what each piece of information is used for:

• Account Management: Identity information is used for registration, login, and account verification.
• Payment Processing: Your financial information is used to securely process deposits and withdrawals.
• Security Assurance: Device and login information is analyzed to detect suspicious activity.
• Legal Compliance: Relevant data is used to meet AML and KYC compliance requirements.
• Customer Support: Account history is used to resolve issues and provide support.
• Personalized Offers: Relevant bonuses and offers are shown based on your betting preferences.
• Platform Improvement: Overall usage patterns are analyzed to improve service quality.
• Contact: Important updates, security alerts, and transaction confirmations are sent to you.

We never share your information with third parties for advertising purposes. You can opt out of Hibajj marketing communications at any time.

Hibajj does not sell your data. However, limited information may need to be shared in certain specific circumstances:

• Payment Providers: The necessary information is shared with bKash, Nagad, or Rocket to process your transactions.
• Identity Verification Services: Documents may be shared with trusted verification providers to complete the KYC process.
• Legal Authorities: We are required to disclose information in response to a valid court order or regulatory authority request.
• Technology Infrastructure: Data is stored on secure cloud hosting services that are bound by strict confidentiality agreements.
• Anti-Fraud System: Minimal data may be exchanged with industry-standard verification services for fraud prevention purposes.

All third parties who receive your data are contractually bound to comply with Hibajj's privacy standards. No third party may use your information for their own purposes.

The Hibajj website uses cookies to enhance your browsing experience. Cookies are small data files stored in your browser. The types of cookies we use:

• Essential Cookies: Required to maintain login sessions and core site functionality. Disabling these cookies will prevent the site from working properly.
• Functional Cookies: Used to remember your language preference, theme settings, and other personalized configurations.
• Analytics Cookies: Collects anonymous statistics to understand which pages are most visited. This data cannot be used to identify you directly.
• Security Cookies: Used to detect suspicious login attempts and fraudulent activity.

You can manage cookies through your browser settings. However, disabling essential cookies may limit access to certain features on the platform.

Hibajj follows industry-leading security standards to protect your information. Here's an overview of our security framework:

• SSL/TLS Encryption: Every connection to the site is secured with 256-bit encryption.
• Two-Factor Authentication (2FA): When you log in to your account, your identity is verified via OTP sent to your phone.
• Firewall Protection: An advanced firewall system protects our servers from cyber attacks.
• Regular Security Audits: Regular security audits are conducted by third-party experts.
• Data Minimization: Only the information that is strictly necessary is collected — nothing more.
• Access Controls: Only authorized personnel may access your data, and only when there is a specific need to do so.

In the event of a security breach, we will notify affected users within 72 hours and take immediate steps to resolve the issue.

Hibajj does not retain data for longer than necessary. Retention periods vary depending on the type of information:

• Account Information: For as long as your account remains active, and for up to 5 years after closure for legal purposes.
• Transaction History: Retained for up to 7 years due to financial regulatory requirements.
• KYC Documents: Retained for up to 5 years after account closure.
• Support Conversations: Records are kept for up to 2 years after the issue is resolved.
• Cookie Data: Session cookies are deleted when you close your browser; persistent cookies typically expire after 30–365 days.

Once the retention period ends, your data is securely deleted or anonymized. You may also request early deletion, though certain data may need to be retained to meet legal obligations.

Every Hibajj user has the following rights regarding their personal data:

• Right to Access: You can request to view what information we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or outdated information.
• Right to Erasure: You may request the deletion of your data under certain circumstances.
• Right to Restrict Processing: You can request that we limit how your data is used in certain circumstances.
• Data Portability: You may request an export of your data in a structured format.
• Right to Object: You can object to the use of your data for specific purposes.
• Opt Out of Marketing Communications: You can opt out of promotional emails or SMS at any time.

To exercise these rights, support@hibajj.app-to email us. We will respond within 30 days. Some requests may not be fully fulfilled due to legal obligations — in such cases, we will explain the reason.

Hibajj strictly does not provide services to anyone under the age of 18. Our policy on this is clear:

• Age is verified at registration, and proof of age is collected as part of the KYC process.
• If we become aware that an account belongs to a minor, it is immediately closed and all stored data is deleted.
• No data belonging to a minor is used for any marketing or analytics purposes.
• If parents have concerns support@hibajj.appto get in touch with us.

For any questions, concerns, or complaints regarding our privacy policy, please get in touch with us:

• Email: support@hibajj.app
• Response Time: Typically within 24 to 48 hours.
• Privacy Requests: Please write "Privacy Request" in the email subject line.

If you are not satisfied with our internal process, you have the right to file a complaint with the relevant regulatory authority. Hibajj respects your privacy at all times and takes every complaint seriously.