Legal
hibj Privacy Policy — How We Handle Your Personal Data
Your privacy is fundamental to how hibj operates. This policy explains exactly what data we collect, why we collect it, how we protect it, and the rights you have over your own information.
Last Updated: January 2026
This Privacy Policy ("Policy") describes how hibj ("the Platform", "we", "us", "our") collects, uses, stores, and protects personal information provided by members and visitors ("you", "your") of the hibj platform at https://hibj.org. This Policy applies to all personal data collected through the hibj website, account registration process, KYC verification, payment transactions, customer support interactions, and any other contact you have with hibj. By registering a hibj account or using the hibj platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein.
hibj is committed to protecting the privacy and security of every member's personal information. We apply industry-standard data security practices, including SSL encryption across all data transmissions, strict access controls on stored personal data, and regular internal reviews of our data handling procedures. This Policy is designed to be transparent and straightforward — we want every hibj member to understand exactly how their data is used before they share it with us.
🔏
hibj does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is used solely to operate your account, process payments, fulfil our responsible gaming and anti-money laundering obligations, and improve the hibj platform experience.
Our Privacy Commitments at a Glance
🔒
SSL Encryption
All data in transit between your device and hibj servers is encrypted via SSL at all times.
🙅
No Data Selling
Your personal data is never sold or rented to third parties for marketing or advertising purposes.
👤
Access Control
Only authorised hibj staff with a legitimate operational need may access your stored personal data.
🗑️
Right to Deletion
You may request deletion of your personal data at any time, subject to legal retention obligations.
🍪
Cookie Transparency
We use only functional and analytical cookies necessary to operate the platform. No third-party ad tracking cookies are placed.
📧
Contact at Any Time
You can contact hibj support at any time regarding your data, rights, or privacy questions via your account dashboard.
Full Privacy Policy
Section 1
Information We Collect
hibj collects personal information from members in the following categories: (a) Registration data — your real full name, date of birth, mobile phone number, and chosen account credentials provided when you create a hibj account; (b) Identity verification data — copies of your National Identity Card (NID) or other government-issued identity document, and proof of address documents, collected as part of our KYC obligations; (c) Financial transaction data — records of all deposits and withdrawals made through your hibj account, including transaction amounts, timestamps, and the mobile wallet identifiers (bKash/Nagad/Rocket/Upay) associated with each transaction; (d) Device and usage data — IP address, browser type, device model, operating system, session duration, pages visited, and game activity within the hibj platform, collected automatically when you access hibj; (e) Communications data — records of your interactions with the hibj customer support team, including support requests, chat logs, and email correspondence.
Section 2
How We Use Your Information
The personal data collected by hibj is used for the following specific purposes: (a) Account management — to create, maintain, and secure your hibj member account and process your transactions; (b) Identity verification and compliance — to fulfil our KYC, anti-money laundering (AML), and responsible gaming obligations under applicable law; (c) Payment processing — to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels in Bangladeshi Taka (BDT); (d) Platform improvement — to analyse usage patterns, identify technical issues, and improve the functionality and performance of the hibj platform; (e) Communications — to respond to your support requests, send important account notifications (such as security alerts, policy updates, and transaction confirmations), and, where you have opted in, to send promotional communications about hibj offers and events; (f) Fraud prevention and security — to detect and investigate suspicious activity, unauthorised account access, and potential violations of the hibj Terms and Conditions.
Section 3
Data Sharing and Third Parties
hibj does not sell, rent, or trade your personal data. We may share your personal information with third parties only in the following limited circumstances: (a) Payment processors — bKash, Nagad, Rocket, Upay, and any other payment service providers used to process your transactions. These processors receive only the data necessary to execute a specific transaction. They operate under their own privacy policies and are subject to their own applicable regulatory obligations; (b) Identity verification providers — third-party KYC service providers used to assist with identity document verification. Data shared with these providers is limited to the specific documents required for verification; (c) Legal and regulatory compliance — where we are required by applicable law, court order, or regulatory authority to disclose personal data, hibj will comply with such requirements. We will notify you of such disclosures where legally permitted to do so; (d) Business operations — trusted technology and infrastructure service providers necessary to operate the hibj platform. These providers are contractually prohibited from using your data for any purpose other than providing services to hibj.
Section 4
Data Storage and Retention
Your personal data is stored on secure servers protected by SSL encryption and strict access controls. hibj retains personal data for as long as your account remains active and for such additional period as may be required by applicable law or our operational compliance obligations. In general, transaction records and KYC documentation are retained for a minimum of five years following account closure in accordance with standard anti-money laundering record-keeping requirements. When personal data is no longer required and no legal retention obligation applies, hibj will securely delete or anonymise it. You may request the deletion of your data at any time — see Section 7 of this Policy for details of your data rights.
Section 5
Data Security Measures
hibj implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include: SSL (Secure Sockets Layer) encryption on all data transmissions between your device and the hibj platform; encrypted storage of sensitive personal and financial data; role-based access controls that limit internal access to personal data to only those staff members with a legitimate operational need; regular internal audits and reviews of data security practices; and session-based authentication to verify the identity of users accessing the platform. No method of electronic transmission or storage is 100% secure. hibj will notify affected members and take all appropriate remediation steps in the event of a confirmed data security incident.
Section 6
Marketing Communications
hibj may send you promotional communications about platform offers, bonuses, new games, and seasonal events where you have opted in to receive such communications during account registration or have subsequently opted in via your account settings. You may opt out of marketing communications at any time by updating your communication preferences in your hibj account settings or by contacting the hibj support team. Opting out of marketing communications does not affect the delivery of transactional messages and account notifications, which hibj must send as part of operating your account (for example, deposit confirmations, withdrawal notifications, and security alerts).
Section 7
Children and Minors
The hibj platform is strictly for adults aged 21 and above. hibj does not knowingly collect personal data from any person under the age of 21. If hibj becomes aware that it has inadvertently collected personal data from a person under 21, that data will be deleted immediately and the associated account will be closed. If you believe that a person under 21 has registered a hibj account, please contact the hibj support team immediately so that appropriate action can be taken. Parents and guardians are encouraged to use parental control tools on shared devices to prevent minors from accessing online gaming platforms.
Section 8
International Data Transfers
The hibj platform primarily serves members in Bangladesh and processes the majority of personal data within the region. Where personal data is processed or stored outside Bangladesh — for example, by cloud infrastructure or KYC service providers operating internationally — hibj ensures that appropriate contractual safeguards and data protection standards are in place to protect your data to a standard equivalent to that required under applicable Bangladeshi law. By using the hibj platform, you consent to the transfer of your personal data to the extent necessary for the operation of the platform, subject to the protections described in this Policy.
Cookies and Tracking Technologies
The hibj platform uses cookies and similar tracking technologies to operate the platform correctly and to analyse usage patterns. Cookies are small text files placed on your device when you access hibj. hibj uses the following categories of cookies: (a) Essential cookies — necessary for the platform to function, including session management, authentication, and security features. These cannot be disabled without preventing the platform from operating correctly; (b) Analytical cookies — used to collect aggregated, anonymised data about how members use the hibj platform, which pages are visited most frequently, and where technical errors occur. This data is used internally to improve the platform and is not linked to individual member identities; (c) Preference cookies — used to remember your language preference and other platform settings across sessions.
hibj does not use third-party advertising cookies or allow advertising networks to place tracking cookies on the hibj platform. Most web browsers allow you to control cookie settings through the browser's privacy or settings menu. You may block or delete cookies via your browser settings; however, disabling essential cookies will affect the functionality of the hibj platform and may prevent you from logging in or using certain features. hibj does not use pixel tracking, web beacons, or fingerprinting technologies for advertising purposes.
Your Rights Over Your Personal Data
Every hibj member has the following rights with respect to their personal data. To exercise any of these rights, contact the hibj support team directly from within your account dashboard. hibj will respond to all data rights requests within a reasonable timeframe and in accordance with applicable law.
Right A
Right of Access
You have the right to request a copy of the personal data that hibj holds about you. hibj will provide this information in a clear and accessible format within a reasonable period of receiving your verified request. This right allows you to confirm that your data is being processed lawfully and to check the accuracy of the information held.
Right B
Right of Rectification
You have the right to request the correction of inaccurate or incomplete personal data that hibj holds about you. If you believe that any information in your hibj account is incorrect — for example, a name spelling error or an outdated phone number — you should contact hibj support to request a correction. hibj will verify and update the data as appropriate.
Right C
Right of Erasure
You have the right to request the deletion of your personal data from hibj's systems. This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw your consent (where consent is the basis of processing), or where you object to processing and there is no overriding legitimate interest. Erasure requests are subject to hibj's legal data retention obligations — in particular, transaction records and KYC documents must be retained for the periods required under applicable anti-money laundering law, and hibj cannot delete these records early even on request.
Policy Updates and How to Contact Us
hibj reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made to this Policy, hibj will notify registered members by posting a notice on the hibj platform. The date at the top of this Policy reflects the date on which the current version came into effect. Your continued use of the hibj platform after the effective date of any updated Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how hibj handles your personal information, please contact the hibj support team directly through your account dashboard. The hibj support team is available 24/7 and will acknowledge all privacy-related enquiries. For data rights requests, hibj will respond within a reasonable timeframe consistent with applicable law. All privacy correspondence is treated with strict confidentiality by hibj staff.