Your Privacy Matters at hdaji

1 Who We Are

hdaji operates hdaji.io, an online betting and casino entertainment platform serving players in Bangladesh and select international markets. We provide cricket betting, live casino games, slot titles, and a range of other gaming entertainment products designed specifically for the Bangladeshi audience.

As the operator of hdaji.io, we act as the data controller for personal information collected through this platform. This means we determine the purposes for which, and the means by which, your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors under our written instruction.

For all privacy-related enquiries, data subject requests, or concerns about how we handle your personal information, you may contact us directly at [email protected]. Our support team is available 24 hours a day, 7 days a week.

2 Data We Collect

2.1 Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, contact our support team, or interact with any feature of hdaji, you may provide us with the following categories of personal data:

Category	Examples	When Collected
Identity Data	Full name, date of birth, gender, nationality, National ID / Passport number	Registration & KYC verification
Contact Data	Email address, mobile number, home address (city, district, Bangladesh)	Registration & profile updates
Financial Data	bKash / Nagad / Rocket / Upay mobile number, bank account details, transaction history	Deposits & withdrawals
Verification Documents	Copies of National ID, passport, proof of address, payment method screenshots	KYC & fraud prevention
Communications Data	Support chat transcripts, email correspondence, submitted feedback	Ongoing account interactions

2.2 Information Collected Automatically

When you visit hdaji.io or use our services, certain technical information is collected automatically by our systems:

• Device & Technical Data: IP address, device type and model, operating system version, browser type and version, screen resolution, and device identifiers
• Usage Data: Pages visited, time spent on each page, click patterns, search queries, game sessions played, bet amounts and outcomes, and navigation paths through the platform
• Location Data: Approximate geographic location derived from your IP address (country and city level only — we do not collect precise GPS coordinates)
• Session Data: Login timestamps, session duration, logout events, and concurrent session information

2.3 Data From Third Parties

In limited circumstances, we may receive personal data about you from third-party sources. These include:

• Payment processors (e.g., bKash, Nagad) confirming the status of a transaction
• Identity verification and fraud screening services used during KYC processing
• Publicly available sources used to fulfil our anti-money-laundering (AML) screening obligations

Data received from third parties is handled with the same level of care and in accordance with the same principles described in this Privacy Policy.

3 How We Use Your Data

hdaji uses your personal data for the following purposes:

• Account Management: Creating and maintaining your player account, verifying your identity, processing login requests, and managing account security
• Service Delivery: Processing deposits and withdrawals, settling bets, crediting winnings, administering bonuses, and providing access to all games and features on the platform
• Legal & Regulatory Compliance: Fulfilling our KYC, AML, and responsible gaming obligations; responding to requests from regulatory or law enforcement authorities where lawfully required
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct
• Responsible Gaming: Monitoring play patterns to identify signs of problem gambling; administering self-exclusion, deposit limit, and cool-off period requests; sending welfare check communications
• Customer Support: Responding to enquiries, resolving disputes, and maintaining records of communications for quality assurance purposes
• Platform Improvement: Analysing usage patterns to improve site performance, game selection, user experience, and the overall quality of our services
• Marketing Communications: Sending promotional offers, bonus notifications, and event announcements — only where you have provided consent or where we have a legitimate interest, and always with a clear opt-out mechanism

4 Legal Basis for Processing

hdaji processes your personal data on the following legal grounds:

• Contract Performance: Processing necessary to deliver the services you have registered for, including account creation, deposits, withdrawals, and bet settlement
• Legal Obligation: Processing required to comply with applicable law, including KYC identity verification, AML screening, and responses to lawful regulatory or judicial requests
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where our legitimate interests are not overridden by your fundamental rights and freedoms
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal

5 Sharing Your Data

hdaji does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only to the extent strictly necessary:

• Payment Service Providers: We share transactional data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners solely to process deposits and withdrawals on your behalf
• Game Technology Providers: Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive session and wager data necessary to operate their games on our platform
• Identity Verification Services: KYC and AML screening providers receive identity documents and related data solely to fulfil verification obligations
• IT & Infrastructure Providers: Cloud hosting, database management, and cybersecurity providers may process data as part of our technical infrastructure, under strict data processing agreements
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or valid legal process
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity subject to the same privacy protections described in this policy

All third parties with whom hdaji shares personal data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with our written instructions.

6 Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit hdaji.io. They help us recognise your browser, remember your preferences, maintain your session, and understand how you use our platform.

6.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login state, security tokens — essential for the platform to function	Session
Functional	Remembering your language, display preferences, and responsible gaming settings	Up to 12 months
Analytics	Understanding page traffic, popular features, and user journeys to improve the platform	Up to 24 months
Marketing	Measuring the effectiveness of promotional campaigns — only with your consent	Up to 12 months

6.3 Managing Cookies

You may manage or disable cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of hdaji.io and may prevent you from accessing certain features including your account. Instructions for managing cookies in common browsers are available via the Help section of your browser.

7 Data Security

hdaji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your browser and hdaji.io is protected by 256-bit SSL/TLS encryption. Sensitive data fields (including payment credentials) are encrypted at rest using industry-standard algorithms
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff members with access to player data undergo background screening and are bound by confidentiality obligations
• Monitoring: Our infrastructure is monitored continuously for suspicious activity, unusual login patterns, and potential security incidents
• Penetration Testing: hdaji.io undergoes regular independent security assessments and penetration tests to identify and remediate vulnerabilities
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, hdaji will notify affected players without undue delay and take all appropriate remedial action

8 Data Retention

hdaji retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. Our standard retention periods are:

• Active Account Data: Retained for the duration of your account relationship with hdaji plus an additional period as required by applicable record-keeping obligations
• Transaction Records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of 5 years following the date of the transaction to meet AML and accounting obligations
• KYC Documents: Identity verification documents are retained for the period required by applicable law, typically 5 years from the date of account closure
• Support Communications: Customer support transcripts and email correspondence are retained for up to 3 years to assist with dispute resolution and quality assurance
• Marketing Data: Where you have consented to marketing communications, your marketing preferences are retained until you withdraw consent or close your account
• Technical Logs: Server logs and security event logs are retained for up to 12 months before being securely deleted or anonymised

When personal data is no longer required, it is securely deleted or irreversibly anonymised so that it can no longer be attributed to you as an individual.

9 Your Privacy Rights

As a player on hdaji, you have the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered account details. We will respond within 30 days of receiving a valid request.

10 Children's Privacy

hdaji is strictly an adult platform. Our services are intended exclusively for individuals who are 21 years of age or older. We do not knowingly collect, process, or store personal data relating to any person under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered on hdaji, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Our age verification procedures are designed to identify and prevent underage registration. We reserve the right to request documentary proof of age at any stage of the account lifecycle.

11 Third-Party Services & Links

hdaji.io integrates services provided by third-party game studios and payment technology partners. While these integrations are carefully selected and managed, each third-party provider operates under its own privacy policy and data practices for the components they control.

Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi operate their own RNG-certified game engines. These providers may collect technical session data as part of game delivery. hdaji ensures that all game providers are contractually bound to appropriate data protection standards.

Payment service providers including bKash, Nagad, Rocket, Upay, and international card schemes process transaction data in accordance with their own privacy policies and applicable financial regulations. hdaji is not responsible for the privacy practices of these third-party services in respect of data processed independently on their own platforms.

hdaji.io does not contain links to external third-party websites other than those required for the operational delivery of our services. This Privacy Policy applies solely to data processed by hdaji as the data controller for hdaji.io.

12 Updates to This Privacy Policy

hdaji reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or operational procedures. When material changes are made to this policy, we will notify registered players via email to the address on file and/or display a prominent notice upon next login.

The effective date displayed at the top of this policy and in the table of contents reflects the date on which the most recent version came into effect. Your continued use of hdaji.io following notification of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you should cease using the platform and contact us to close your account.

We recommend reviewing this Privacy Policy periodically to stay informed about how hdaji protects your personal information. Archived versions of previous Privacy Policy documents are available upon request by contacting [email protected].

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way hdaji handles your personal data, please contact our privacy team using the details below. We are committed to resolving all privacy-related enquiries promptly and thoroughly.

When submitting a data subject request, please include your registered username and the email address associated with your hdaji account so that we can verify your identity and locate your records efficiently. We may ask for additional verification before processing requests that involve access to or deletion of account data, in order to protect your security.

hdaji takes all privacy complaints seriously. If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction.