hibage Privacy
Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how hibage ("hibage", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "player") who access or use the hibage online gambling platform at hibage.biz ("the Platform"). This Policy applies to all hibage players, registered users, and visitors to the Platform regardless of the device or network used to access it.

hibage is committed to protecting the privacy of every player on its platform. We recognise that the personal data you entrust to us — including identity documents, payment information, and account activity — is sensitive, and we treat it accordingly. This Policy is intended to give you clear, honest, and complete information about our data practices so you can make informed decisions about using the hibage platform.

This Policy should be read alongside the hibage Terms & Conditions and Responsible Gaming Policy. Capitalised terms used in this Policy that are not defined herein have the meanings assigned to them in the hibage Terms & Conditions.

2. Data Controller Information

hibage is the data controller responsible for the personal data collected through the Platform. For all data-related enquiries, correction requests, deletion requests, or complaints relating to this Privacy Policy, please contact the hibage data team using the contact details provided in Section 16 of this Policy.

hibage processes personal data in connection with the operation of an online gambling platform directed at players in Bangladesh. All data processing described in this Policy relates to that operational context.

3. Personal Data We Collect

hibage collects the following categories of personal data from players:

3.1 Identity and Registration Data

• Full legal name as it appears on your Bangladesh National Identity Card (NID) or passport
• Date of birth
• Gender (where provided during registration)
• Nationality and country of residence
• Registered email address
• Bangladesh mobile phone number
• Username selected during account creation

3. 2 Identity Verification (KYC) Data

• Scanned copy or photograph of your Bangladesh NID, passport, or driving licence
• Proof of address documentation (utility bill, bank statement, or equivalent)
• Source-of-funds documentation where requested for enhanced due diligence
• Selfie or live photograph for biometric identity matching where required

3.3 Financial and Payment Data

• Mobile financial service account numbers (bKash, Nagad, Rocket, Upay)
• Bank account details for direct bank transfer withdrawals
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers
• Wallet balance and bonus balance information

3.4 Account Activity and Gameplay Data

• Login timestamps and session durations
• Games played, bet amounts, and game outcomes
• Betting history across all product verticals (sports, live casino, slots, crash games)
• Bonus claims, wagering progress, and promotional participation records
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

3.5 Technical and Device Data

• IP address at the time of access
• Device type, operating system, and browser type and version
• Unique device identifiers
• Referring URL and pages visited on the Platform
• Time zone and language settings

3.6 Communications Data

• Contents of support tickets, chat transcripts, and email correspondence with the hibage support team
• Feedback, complaints, and dispute records
• Marketing preference selections (opt-in or opt-out records)

4. How We Collect Your Data

hibage collects personal data through the following channels:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically during your use of the Platform — through server logs, cookies, session tracking technologies, and game engine data feeds that record your activity while you are logged in to hibage.
• From third-party payment providers — bKash, Nagad, Rocket, Upay, and bank partners may share transaction confirmation data with hibage to verify that deposits and withdrawals have been processed correctly.
• From KYC and identity verification partners — accredited identity verification services may return verification status and matched identity data to hibage as part of the KYC process.
• From fraud prevention and security services — risk scoring, device fingerprint data, and flagged transaction patterns may be received from third-party fraud detection tools used to protect the integrity of the Platform.

5. Legal Basis for Processing

hibage processes your personal data on the following legal grounds:

6. How We Use Your Personal Data

hibage uses the personal data it collects for the following purposes:

• To create and manage your hibage player account and maintain accurate account records
• To verify your identity and age in compliance with our Know Your Customer (KYC) obligations before processing withdrawals
• To process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer)
• To deliver the games, betting markets, and other services available on the hibage platform
• To detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited conduct
• To monitor gameplay patterns and responsible gaming indicators, and to intervene proactively where a player shows signs of gambling-related harm
• To enforce the hibage Terms & Conditions, including the application of bonus wagering requirements and the closure of accounts found to be in breach of platform rules
• To respond to your customer support enquiries, complaints, and dispute submissions
• To send you account-related notifications such as deposit confirmations, withdrawal approvals, security alerts, and policy update notices
• To send you promotional communications, bonus offers, and personalised marketing messages — only where you have opted in to receive such communications
• To analyse aggregated platform usage data for the purpose of improving the hibage user experience, product offering, and platform performance
• To comply with applicable legal and regulatory obligations including anti-money laundering record-keeping requirements

7. Sharing Your Personal Data

hibage does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share your personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

7.1 Payment Processors

To process your deposits and withdrawals, hibage must share transaction data with the relevant payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other accepted banking partners. These providers receive only the data required to execute and confirm the specific transaction.

7.2 Identity Verification Partners

To fulfil our KYC obligations, hibage works with accredited third-party identity verification services. These partners receive the identity documents you submit for verification and return a verification status to hibage. They are bound by confidentiality obligations and are not permitted to use your data for any purpose other than the verification service.

7.3 Game and Software Providers

The casino games and sports betting products on hibage are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming, and others. These providers may receive a pseudonymised player identifier and game session data necessary to run the game and record the outcome. They do not receive your full name, payment details, or identity documents.

7.4 Fraud Prevention and Security Services

hibage uses third-party fraud detection and risk management tools. These services may receive device identifiers, IP addresses, transaction patterns, and other technical data to generate risk assessments that help hibage identify and prevent fraudulent activity on the Platform.

7.5 Legal and Regulatory Disclosures

hibage may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of hibage, its players, or the public. hibage will notify affected players of such disclosures where legally permitted to do so.

7.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of hibage's business or assets, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and the privacy terms applicable to their data following the transaction.

8. Cookies and Tracking Technologies

hibage uses cookies and similar tracking technologies to operate the Platform, improve user experience, and analyse how the Platform is used. Cookies are small text files placed on your device when you visit the hibage website.

8.1 Types of Cookies Used

• Strictly necessary cookies — required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without rendering the Platform inoperable.
• Functional cookies — used to remember your preferences such as language settings, display preferences, and last visited game category.
• Analytics cookies — used to collect anonymised data about how players navigate the Platform, which pages are most visited, and where players encounter errors. This data is used solely to improve the hibage user experience.
• Marketing and personalisation cookies — used to deliver relevant promotional content and personalised bonus offers to players who have opted in to marketing communications. These cookies are not placed on devices of players who have not consented to marketing.

8.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain functional cookies may affect your experience on the hibage platform, including the loss of saved preferences and potentially longer login times. Disabling strictly necessary cookies will prevent the Platform from functioning correctly.

9. Data Retention

hibage retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention guidelines apply:

• Account data and KYC records — retained for a minimum of five years following the closure or deactivation of your hibage account, in compliance with standard anti-money laundering record-keeping obligations.
• Transaction records — retained for a minimum of five years following the date of each transaction.
• Gameplay and betting history — retained for a minimum of three years from the date of each session, or for the duration of any open dispute period if longer.
• Customer support communications — retained for three years from the date of the most recent communication in a support thread.
• Marketing consent records — retained for the duration of your account and for one year following account closure, to demonstrate compliance with consent requirements.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

10. Data Security

hibage implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the hibage servers
• Encryption of sensitive data at rest, including identity documents and payment account references
• Access controls that restrict employee access to personal data on a strict need-to-know basis
• Multi-factor authentication requirements for hibage staff accessing administrative systems
• Regular security vulnerability assessments and penetration testing
• Automated monitoring of platform infrastructure for anomalous access patterns and potential intrusions
• Secure disposal and deletion procedures for data that has reached the end of its retention period

While hibage takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, hibage will notify affected players without undue delay and will take immediate remedial action to contain the breach and prevent further exposure.

11. Your Data Protection Rights

As a hibage player, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data hibage holds about you at any time. hibage will respond to access requests within a reasonable timeframe and at no charge for a first request within any twelve-month period.
• Right to rectification — if any personal data hibage holds about you is inaccurate or incomplete, you may request that it be corrected. Certain corrections (such as changes to your registered name) may require documentary evidence.
• Right to erasure — you may request that hibage delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where processing is unlawful. This right is subject to legal retention obligations that may require hibage to retain certain data for a defined period even after account closure.
• Right to restriction of processing — you may request that hibage restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and that objection is pending review.
• Right to data portability — where processing is based on your consent or on a contractual necessity, you may request that hibage provide your personal data in a structured, machine-readable format.
• Right to withdraw consent — where hibage processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time by contacting support or updating your marketing preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to object — you may object to processing carried out on the basis of hibage's legitimate interests. hibage will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

To exercise any of the above rights, please contact the hibage support team at [email protected]. hibage will acknowledge your request promptly and will aim to resolve it within thirty days.

12. Children and Minors

The hibage platform is strictly for adults aged 18 years and above. hibage does not knowingly collect personal data from any person under the age of 18. If hibage discovers that personal data has been collected from a minor, the relevant account will be immediately closed, all associated data will be securely deleted (subject to any mandatory legal retention obligations), and the matter will be escalated internally for review.

Parents and guardians are strongly encouraged to make use of parental control software and internet filtering tools to prevent minors from accessing online gambling platforms, including hibage. If you believe a minor may have accessed hibage using your device or payment credentials, please contact the hibage support team immediately at [email protected].

13. Third-Party Links and Services

The hibage platform may contain references to third-party services, game studios, or payment providers. This Privacy Policy applies solely to the data processed by hibage directly. hibage is not responsible for the privacy practices of third-party game providers, payment processors, or any other external service whose systems your data passes through as part of transaction execution or game delivery. Players are encouraged to review the privacy policies of any third-party service they interact with in connection with their hibage account.

14. International Data Transfers

hibage's primary operations and data storage infrastructure are focused on serving the Bangladesh market. Where data is transferred to or processed by third-party service providers whose infrastructure is located outside Bangladesh — for example, cloud hosting providers, KYC verification services, or game studios — hibage ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy. Such safeguards may include contractual data protection clauses, standard contractual clauses, or equivalent mechanisms.

15. Changes to This Privacy Policy

hibage reserves the right to update or amend this Privacy Policy at any time. When material changes are made — meaning changes that affect the nature of the data collected, the purposes for which it is used, or the rights available to players — hibage will notify registered players via their registered email address and will post a prominent notice on the Platform. The effective date at the top of this Policy will be updated to reflect the date on which the revised Policy takes effect.

Continued use of the hibage platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure by contacting hibage support.

16. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data hibage holds about you, please contact the hibage data protection team. Our support staff are available 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]

Please include your registered username and a brief description of your request in your email. Do not include your password, payment PINs, or full payment account numbers in any email communication. hibage staff will never request this information by email.