Privacy Policy

hbdd collects personal data from you in three principal ways: data you provide directly during registration and account operation, data generated automatically through your use of the platform, and data received from trusted third-party verification and payment partners. This section describes each category in detail.

1.1 Data You Provide Directly

When you register an hbdd account or subsequently update your profile, you provide us with information that may include:

• Your full legal name as it appears on your government-issued identity document.
• Date of birth, which is used exclusively for age verification to confirm you are 18 years of age or older.
• Residential address, including city (for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or another Bangladeshi city or district).
• Email address, used for account communications, password recovery, and important service notifications.
• Mobile phone number, particularly the number associated with your bKash, Nagad, Rocket, or Upay mobile wallet account.
• Identity documents submitted for KYC (Know Your Customer) verification, such as your National Identity Card (NID) or passport.
• Proof of address documents where requested as part of enhanced verification.
• Communications you send to hbdd support, including live chat transcripts and emails sent to [email protected].

1.2 Data Generated Automatically

When you access and use the hbdd platform, certain data is recorded automatically by our systems. This includes:

• IP address and approximate geographic location derived from it.
• Device type, operating system, browser type and version, and screen resolution.
• Session timestamps — the date and time you logged in and out of your hbdd account.
• Pages visited within the hbdd platform, navigation paths, and time spent on each section.
• Complete game history: every game played, stake placed, outcome recorded, and bonus used.
• Full transaction history: every deposit and withdrawal, including payment method used, amount in Bangladeshi Taka (৳), and timestamp.
• Betting history on sports markets including cricket (BPL, T20, IPL), football, and other events.

1.3 Data from Third Parties

hbdd may receive supplementary data about you from third-party service providers engaged to support platform operations, including identity verification agencies, fraud detection services, and payment processing partners such as bKash, Nagad, Rocket, and Upay. This data is received only to the extent necessary for the specific operational purpose and is handled under the same standards as data you provide directly.

hbdd uses the personal data it collects for specific, clearly defined purposes. We do not use your data for purposes that are incompatible with those stated here without first obtaining your consent or where permitted by applicable law.

hbdd does not use automated profiling or algorithmic decision-making that produces legal or similarly significant effects on players without human review. Where automated processes are used for fraud detection or responsible gaming monitoring, any decision to restrict or close an account will be reviewed by a member of hbdd's compliance team before action is taken.

hbdd does not sell your personal data. We do not rent it. We do not share it with unrelated third parties for their own commercial gain. Data sharing is limited strictly to the categories of recipients and purposes described in this section.

3.1 Payment Processing Partners

To process your deposits and withdrawals, hbdd must share relevant account and transaction data with the payment service providers you use. This includes mobile financial service operators such as bKash, Nagad, Rocket, and Upay, as well as card networks including Visa and Mastercard, and Bangladeshi banks including Dutch-Bangla Bank, BRAC Bank, City Bank, and others as applicable. These providers receive only the minimum data required to complete the specific transaction and are contractually prohibited from using it for any other purpose.

3.2 Identity Verification Services

hbdd engages third-party identity verification services to assist with KYC compliance. These services may process your name, date of birth, document images, and photograph solely for the purpose of verifying your identity. All such providers are bound by confidentiality obligations and data processing agreements consistent with this Privacy Policy.

3.3 Game Content Providers

Games on the hbdd platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers operate the game servers and necessarily process certain technical session data (such as a session token and stake amount) to deliver gameplay. They do not receive your name, address, or payment details.

3.4 Legal and Regulatory Disclosure

hbdd may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, where disclosure is necessary to prevent or detect crime, or where required to protect the rights, property, or safety of hbdd, its players, or the public.

hbdd uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, maintain your session security, remember your preferences, and gather aggregated analytics about how the platform is used. This section explains the categories of cookies used and their purpose.

hbdd does not use third-party advertising cookies or behavioural tracking cookies that follow you across other websites. The tracking technologies described above are confined to the hbdd platform domain.

You may control cookie behaviour through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your hbdd account. Disabling functional cookies will mean your preferences are not saved between sessions. Disabling analytics cookies will not affect your ability to use the platform but will limit hbdd's ability to identify and fix usability issues.

hbdd retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, or as required by applicable laws and regulations. The following retention periods apply:

• Active account data: Retained for the full duration of your account being open and active on hbdd.
• Post-closure account data: Following voluntary or hbdd-initiated account closure, your core account record and identity verification data are retained for a period of five (5) years. This is required to meet anti-money laundering obligations, respond to regulatory enquiries, and resolve any post-closure disputes.
• Transaction records: All deposit and withdrawal records, denominated in Bangladeshi Taka (৳), are retained for seven (7) years from the date of the transaction to meet financial record-keeping requirements.
• Game history logs: Complete game round data is retained for five (5) years from the date of the game round, enabling dispute resolution and responsible gaming monitoring.
• Support communications: Emails and live chat logs sent to or from [email protected] are retained for three (3) years from the date of the communication.
• Marketing opt-in records: Records of your consent to receive marketing communications are retained for the duration of your active account plus three (3) years post-closure to demonstrate compliance with consent obligations.
• KYC documents: Identity documents uploaded for verification are retained for five (5) years following account closure or the last material transaction, whichever is later.

When a retention period expires, hbdd securely destroys or irreversibly anonymises the relevant personal data so that it can no longer be associated with you. Anonymised, aggregated data (from which no individual can be identified) may be retained beyond these periods for statistical and research purposes.

hbdd recognises and respects your rights over your personal data. The following rights are available to all registered hbdd players. To exercise any of these rights, contact hbdd's support team at [email protected] with the subject line "Privacy Rights Request". hbdd will respond within 30 calendar days of receiving a valid request.

Right of Access: You have the right to request a copy of all personal data that hbdd holds about you. This includes your account data, KYC records, transaction history, game history, and support communications. hbdd will provide this in a structured, commonly used, machine-readable format.

Right to Rectification: If any personal data hbdd holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your address has changed since registration, you may update it through your account settings or by contacting support.

Right to Erasure: You may request the deletion of your personal data. hbdd will action this request subject to the following conditions: (a) the account must be closed prior to the deletion request; (b) all pending transactions must be settled; (c) no active regulatory or legal hold applies to your data. Data that hbdd is legally required to retain (such as transaction records required for financial compliance) cannot be deleted until the relevant retention period has expired, but hbdd can restrict active processing of it in the interim.

Right to Restrict Processing: In certain circumstances — for example, where you contest the accuracy of data or have objected to processing — you may request that hbdd restricts active use of your personal data while the matter is resolved.

Right to Data Portability: You may request that hbdd provides your personal data in a portable format so that you can transfer it to another service provider. This right applies to data you have provided directly and data generated by your account activity.

Right to Object: You have the right to object to hbdd's processing of your personal data where that processing is based on legitimate interest (rather than contract performance or legal obligation). hbdd will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent: Where hbdd's processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

hbdd implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no system can guarantee absolute security, hbdd's security practices reflect current industry standards for online gaming platforms serving the Bangladesh market.

The key security measures in place include:

• Transport Layer Security (TLS): All data in transit between your browser or mobile device and hbdd's servers is encrypted using TLS 1.2 or higher. This applies to every connection to the hbdd platform, including login, deposit, game play, and withdrawal flows.
• Encryption at rest: Sensitive personal data, including identity document images and payment details, is encrypted when stored on hbdd's servers using AES-256 encryption.
• Access controls: Access to personal data within hbdd's systems is restricted on a strict need-to-know basis. Staff access is logged, and access privileges are reviewed regularly. No hbdd employee has standing access to full payment credentials.
• Password security: Player passwords are stored using a one-way cryptographic hashing algorithm with salting. hbdd never stores passwords in plain text and cannot retrieve your password — only reset it via a verified process.
• Fraud detection systems: Automated monitoring systems scan for unusual account activity, login attempts from unrecognised devices or locations, and transaction patterns inconsistent with normal player behaviour. Suspicious activity triggers account review and, where necessary, temporary suspension pending investigation.
• Regular security assessments: hbdd conducts periodic security assessments of its platform infrastructure and data handling practices to identify and remediate vulnerabilities.

In the event of a personal data breach that poses a risk to your rights and freedoms, hbdd will notify affected players via the email address registered to their account as promptly as possible, describing the nature of the breach, the data affected, and the steps hbdd is taking to address it.

You play an important role in keeping your hbdd account secure. hbdd strongly recommends that you use a unique, strong password for your hbdd account, enable any available two-factor authentication, and contact support immediately at [email protected] if you suspect your account credentials have been compromised.

hbdd may update this Privacy Policy from time to time to reflect changes in our data practices, changes to applicable law, or improvements in how we operate the platform. When material changes are made, hbdd will notify registered players by email to the address on file and will post a notice on the platform prior to the changes taking effect. The effective date at the top of this document will be updated accordingly.

We encourage you to review this Privacy Policy periodically. Your continued use of the hbdd platform after any update constitutes acceptance of the revised policy. If you do not agree with the revised policy, you should close your hbdd account and cease using the platform.

Minor, non-material changes — such as corrections of typographical errors, clarifications that do not alter the substance of any provision, or updates to contact details — may be made without prior notice, though the effective date will be updated.

This Privacy Policy is governed by and construed in accordance with the laws applicable in Bangladesh. Any disputes arising in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Bangladesh. This policy is written in English, which is the governing language for all interpretations and disputes.