hi bazi Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how hi bazi ("hi bazi", "we", "us", "our") collects, processes, stores, and protects the personal information of individuals ("you", "your", "the Player") who use the hi bazi website and all associated services available at hi-bazi.com.

hi bazi is committed to handling personal information responsibly, transparently, and in accordance with good data protection practices. We operate a platform serving players in Bangladesh, and this Policy is written in plain English so that every player can clearly understand their privacy rights and our data obligations.

By registering an account with hi bazi, making a deposit, placing a bet, or otherwise using any part of the hi bazi platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference. In the event of a conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy will prevail.

02 Data We Collect

hi bazi collects personal information in several ways: information you provide to us directly, information generated automatically through your use of the platform, and information obtained from trusted third-party sources for verification purposes. The categories of personal data we collect are detailed below.

Information you provide directly:

• Registration data: Full name, date of birth, email address, Bangladeshi mobile phone number, and a secure password when you create a hi bazi account.
• Identity verification data: Copies of government-issued identification documents such as your National Identity Card (NID) or passport, submitted during KYC (Know Your Customer) verification.
• Payment data: Mobile financial service account numbers (e.g., bKash, Nagad, Rocket, Upay) and bank account details provided for the purpose of processing deposits and withdrawals in BDT.
• Communications: Content of any messages, support tickets, live chat conversations, or emails you send to hi bazi support.
• Responsible gaming preferences: Deposit limits, time-out selections, self-exclusion requests, and reality check settings that you configure in your account.

Information collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, time spent on each page, game sessions started and completed, bet history, deposit and withdrawal activity, and navigation paths through the platform.
• Session data: Login timestamps, session duration, logout timestamps, and security event logs (e.g., failed login attempts).
• Cookies and similar technologies: First-party cookies, session tokens, and analytics data collected via cookies. See Section 4 for a full explanation of our cookie practices.
• Location data: General geographic location inferred from your IP address. We do not collect precise GPS-level location data.

Information from third parties:

• Identity verification services: Where we use a third-party KYC provider to verify the authenticity of identity documents you have submitted.
• Payment processors: Transaction status and reference information from bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks, necessary to reconcile deposits and withdrawals.
• Fraud and risk services: Risk signals and fraud indicators from specialist third-party providers used to protect the platform and our players from financial crime.

03 How We Use Your Data

hi bazi uses the personal information it collects for the following purposes. For each purpose we have identified the legal basis on which we rely to process your data.

hi bazi will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new legitimate legal basis for processing.

Marketing opt-out: If you have consented to receive promotional communications from hi bazi and later wish to withdraw that consent, you may do so at any time by updating your communication preferences in your account settings, or by contacting [email protected]. Withdrawal of marketing consent does not affect our ability to send you transactional communications (e.g., deposit confirmations, security alerts, or account status notifications), which are sent on the basis of contract performance.

04 Cookies & Tracking Technologies

hi bazi uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to keep your session secure, and to understand how players interact with different parts of the site. This section explains the types of cookies we use and how you can manage them.

What are cookies? Cookies are small text files that are stored on your device when you visit a website. They are widely used across the internet to make websites work efficiently and to provide information to website owners. Cookies do not contain executable code and cannot access other files on your device.

Types of cookies used by hi bazi:

• Essential cookies: These cookies are strictly necessary for the hi bazi platform to function. They manage your login session, maintain your account security token, and remember items you have placed in your bet slip. The platform cannot function correctly without these cookies. They cannot be disabled.
• Functional cookies: These cookies remember your platform preferences — such as your preferred language, display settings, and notification preferences — so you do not need to reset them on every visit.
• Analytics cookies: These cookies help us understand how players use the platform — which pages are most popular, where users tend to leave the site, and how long sessions last. This data is aggregated and anonymised where possible and is used solely to improve the hi bazi experience. No personally identifiable information is shared with analytics providers.
• Security cookies: These cookies support our fraud detection and platform security systems, helping us identify unusual or suspicious activity patterns that may indicate an attempt to compromise player accounts.

Managing cookies: You can control the use of non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is stored. Please note that blocking essential cookies will impair the functionality of the hi bazi platform and may prevent you from logging in or using core features. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

05 Data Sharing & Third Parties

hi bazi does not sell, rent, or trade your personal information to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

• Payment processors: We share the minimum necessary payment and identity data with bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks to process your deposits and withdrawals in BDT. Each payment provider operates under its own privacy policy and data protection obligations.
• Identity verification providers: Where we use a third-party KYC or document verification service to authenticate the identity documents you submit, your document images and associated data are shared with that provider solely for the purpose of verification. Verified results are returned to hi bazi and retained on your account record.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their game content and ensure fair gameplay. These providers do not receive your full identity or payment details.
• Fraud prevention and security services: We share risk signals and relevant account data with specialist fraud prevention providers to protect the platform from financial crime and to safeguard all players.
• Legal and regulatory authorities: hi bazi will disclose personal data to law enforcement, regulatory bodies, courts, or other government authorities where we are legally required to do so, or where we reasonably believe that disclosure is necessary to protect the safety of any individual, prevent fraud, or comply with a valid legal process.
• Platform infrastructure providers: Our hosting, cloud infrastructure, and technical service providers may process personal data on our behalf as data processors. All such providers are bound by contractual data processing agreements that require them to process data only on hi bazi's documented instructions and to maintain appropriate security standards.

All third parties with whom hi bazi shares personal data are required to handle that data in accordance with applicable data protection standards. hi bazi remains responsible as the data controller for ensuring appropriate contractual protections are in place with all data processors.

06 Data Retention

hi bazi retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with hi bazi, plus a minimum of five (5) years following account closure. This retention is required to comply with applicable anti-money laundering and financial record-keeping obligations.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction or bet, in accordance with financial record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification, or from the date of account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the final communication in any given support thread, unless the communication relates to a legal matter or dispute, in which case it is retained for the duration of that matter plus two (2) years.
• Marketing consent records: Retained for as long as you hold an active hi bazi account. If you withdraw marketing consent, we retain a record of that withdrawal for compliance purposes for five (5) years.
• Analytics and usage data: Aggregated and anonymised analytics data may be retained indefinitely for platform improvement purposes. Personally identifiable usage logs are retained for a maximum of two (2) years.
• Cookie data: Session cookies expire at the end of your browser session. Persistent cookies expire in accordance with the durations specified in each cookie's metadata, typically between 30 and 365 days.

When personal data is no longer required and no legal retention obligation applies, hi bazi will securely delete or anonymise that data using industry-standard disposal methods. Where complete deletion is not technically feasible (for example, data stored in encrypted backup archives), the data will be isolated and protected from any further active processing until it can be permanently deleted.

07 Your Rights Over Your Personal Data

As a player whose personal data is processed by hi bazi, you hold a number of rights with respect to that data. hi bazi is committed to respecting and facilitating these rights in a timely and transparent manner.

• Right of access: You have the right to request a copy of the personal data hi bazi holds about you, along with information about how that data is being used. We will provide this information within 30 days of receiving a verified request.
• Right to rectification: If any of the personal data hi bazi holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many of your account details directly through your account settings. For data that cannot be self-corrected, contact our support team.
• Right to erasure ("right to be forgotten"): You may request that hi bazi delete the personal data it holds about you. We will fulfil this request where the data is no longer needed for the purposes for which it was collected and where no legal retention obligation requires us to keep it. Note that certain financial and identity records must be retained for regulatory compliance purposes even following an erasure request.
• Right to restrict processing: You have the right to request that hi bazi restrict the active processing of your personal data in certain circumstances — for example, if you contest the accuracy of data we hold, while we verify its accuracy.
• Right to data portability: You have the right to request that the personal data you have provided to hi bazi be provided to you in a structured, commonly used, and machine-readable format, so that you may transfer it to another service provider.
• Right to object: You have the right to object to the processing of your personal data where hi bazi relies on legitimate interest as the legal basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where hi bazi processes your data on the basis of your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our support team by emailing [email protected] with the subject line "Privacy Request — [Your Right]". We will ask you to verify your identity before processing any data subject request. We aim to respond to all requests within 30 days. Where a request is complex or high in volume, we may extend this period by up to a further 30 days, and we will notify you accordingly.

08 Data Security

The security of your personal information is a top priority at hi bazi. We have implemented a range of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure.

• Encryption in transit: All communications between your device and the hi bazi platform are encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. This includes all account login sessions, payment flows, and support communications.
• Encryption at rest: Sensitive personal data stored on hi bazi's servers — including identity documents, payment references, and account credentials — is encrypted at rest using AES-256 encryption.
• Password security: Account passwords are hashed using a strong one-way cryptographic hashing algorithm. hi bazi staff cannot view your password in plain text. We strongly recommend you use a unique, complex password for your hi bazi account and enable any available two-factor authentication features.
• Access controls: Access to personal data within hi bazi's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their role. All internal data access is logged and subject to audit.
• Penetration testing and security audits: hi bazi commissions periodic independent security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that is likely to result in risk to the rights and freedoms of players, hi bazi has an incident response plan in place. Affected players will be notified without undue delay, and we will take all reasonable steps to contain and remediate the incident promptly.

While hi bazi takes every reasonable precaution to protect your data, no internet-based system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your account credentials — including your password and any two-factor authentication codes — and for logging out of your account when using shared or public devices. If you suspect that your account has been compromised, please contact our support team immediately at [email protected].

09 Contact & Data Protection Inquiries

If you have any questions, concerns, or complaints about how hi bazi handles your personal data, or if you wish to exercise any of the rights described in Section 7, please contact us using the details below. Our English-speaking privacy support team is available 24/7 to assist you.

Privacy inquiries and data subject requests:
Email: [email protected]
Subject line: "Privacy Request" or "Data Subject Request"
Response time: Within 30 days of receipt of a verified request.

General support:
Live Chat is available 24/7 from your hi bazi account dashboard for general privacy questions. For formal data subject requests, email is the preferred and most secure channel.

Changes to this Privacy Policy:
hi bazi reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will update the "Last updated" date at the top of this page and, where the change is significant, notify you by email at your registered address. Your continued use of the hi bazi platform following notification of a change constitutes acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your data.