hiabee Privacy Policy

When you register for and use the hiabee platform, we collect various categories of personal information necessary to provide our services, comply with applicable obligations, and maintain the security and integrity of the platform. This Privacy Policy governs all data collected through the hiabee website and mobile web application.

1.1 Information You Provide Directly

When you create a hiabee account or interact with the platform's features, you voluntarily provide the following categories of information:

1.2 Information Collected Automatically

When you access and use the hiabee platform, our systems automatically collect certain technical and behavioural data. This information is used to ensure platform stability, detect fraudulent activity, and improve the quality of our services:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Network Information: IP address, internet service provider (ISP), approximate geographic location derived from IP, and connection type.
• Usage Data: Pages visited, features accessed, betting history, game sessions, session duration, click patterns, and navigation paths within the platform.
• Transaction Logs: Timestamps, amounts, payment gateway references, and outcomes for all deposit and withdrawal transactions.
• Cookie and Tracking Data: Session identifiers, preferences stored locally, and anonymised analytics events. See Section 4 for full cookie details.

1.3 Information from Third Parties

In certain circumstances, hiabee may receive personal information about you from third-party sources, including:

• Payment processors such as bKash, Nagad, Rocket, Upay, and bank partners, who may share transaction confirmation and account holder name data for reconciliation purposes.
• Identity verification service providers used during the KYC process, who may return verification status and document authenticity results.
• Fraud detection and anti-money-laundering (AML) screening services, who may flag accounts based on external risk indicators.

hiabee processes your personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which hiabee processes personal data are as follows:

2.1 Account Management and Service Delivery

Your identity, contact, and credential data are processed to create and maintain your hiabee account, authenticate your login sessions, process deposits and withdrawals, settle bets and casino game outcomes, and provide responsive customer support. Without this processing, we cannot deliver the core services of the platform.

2.2 Regulatory Compliance and Fraud Prevention

hiabee processes identity and financial data as part of our Know Your Customer (KYC) obligations and anti-money-laundering (AML) screening. This processing is necessary to verify player identity, confirm age eligibility (18+ only), detect potentially fraudulent activity, and prevent financial crime. Where suspicious activity is identified, we may be required to report it to relevant authorities without prior notice to the account holder.

2.3 Platform Improvement and Analytics

Anonymised and aggregated usage data is analysed to understand how players interact with hiabee, identify performance issues, test new features, and prioritise product improvements. This analysis does not identify individual players and is used solely to enhance the overall quality of the platform experience.

2.4 Responsible Gaming Monitoring

hiabee uses behavioural data — including betting frequency, session length, deposit patterns, and loss chasing indicators — to identify players who may be exhibiting signs of problem gambling. Where such patterns are detected, we may proactively reach out to offer responsible gaming tools, impose temporary account restrictions, or refer the player to support resources. This processing is conducted in the interest of player welfare and platform integrity.

2.5 Marketing and Promotions

Where you have provided consent or where permitted under applicable rules, hiabee may use your contact data to send promotional communications about new features, bonuses, cricket and football betting events, and seasonal promotions relevant to the Bangladesh market (such as Eid special offers, BPL season promotions, or IPL betting previews). You may withdraw consent for marketing communications at any time. See Section 7 for full details.

hiabee does not sell, rent, or otherwise trade your personal data to third parties for commercial gain. However, in order to operate the platform effectively, we engage a limited number of trusted service providers and may share data with regulatory bodies where legally required. All third-party data sharing arrangements are governed by written data processing agreements requiring those parties to handle your data with equivalent levels of protection.

3.1 Service Providers

hiabee shares personal data with carefully selected third-party service providers who process data on our behalf for the following purposes:

• Payment Processing: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive transaction data necessary to process deposits and withdrawals. These providers operate under their own privacy frameworks and are independently responsible for the data they process as payment principals.
• Identity Verification: Third-party KYC service providers receive copies of identity documents to perform age and identity verification checks on behalf of hiabee.
• Game Software Providers: Casino and sports data providers such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi may receive anonymised session data for game integrity and RNG certification purposes. These providers do not receive directly identifying player data beyond what is required for technical game delivery.
• IT Infrastructure and Cloud Services: hiabee uses secure cloud hosting and content delivery providers to operate the platform. These providers may store or process data on servers located in secure data centres. All infrastructure partners are contractually bound to maintain data security standards.
• Fraud and AML Screening: Specialist screening tools may cross-reference player data against publicly available watchlists and risk databases as part of our compliance obligations.

3.2 Legal Disclosure

hiabee may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorised third parties where we are legally required or compelled to do so. Such disclosures will only be made to the extent strictly necessary and in accordance with applicable legal process. Where permitted by law, hiabee will attempt to notify the affected player of such a disclosure request before complying.

3.3 Business Transfers

In the event that hiabee undergoes a merger, acquisition, corporate restructuring, or sale of all or part of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy before the transfer takes effect.

hiabee uses cookies, local storage, and similar tracking technologies to operate the platform, maintain your session, prevent fraud, and collect anonymised usage analytics. This section explains the types of cookies we use and how you can manage your preferences.

4.1 Types of Cookies Used by hiabee

4.2 Managing Cookie Preferences

You can manage non-essential cookies through your hiabee account settings at any time. Additionally, most modern browsers allow you to block or delete cookies through their built-in privacy settings. Please be aware that disabling strictly necessary or fraud prevention cookies will impair platform functionality and may prevent you from logging in or completing transactions securely.

hiabee does not use third-party advertising cookies or participate in cross-site behavioural advertising networks. The analytics data we collect via cookies is processed in aggregate form and is not used to build individual advertising profiles.

hiabee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• Encryption in Transit: All data exchanged between your browser or device and the hiabee platform is encrypted using TLS 1.2 or higher. We enforce HTTPS across all platform endpoints.
• Encryption at Rest: Sensitive personal data fields, including identity document data and payment references, are encrypted at rest within our database infrastructure.
• Password Security: Account passwords are never stored in plain text. hiabee uses bcrypt hashing with an appropriate cost factor to store password credentials.
• Access Controls: Access to personal data is restricted to hiabee employees and contractors who have a legitimate operational need. All staff with data access are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection: hiabee deploys automated systems to monitor for unusual access patterns, brute-force attempts, and potential data exfiltration events in real time.
• Security Reviews: Our platform and infrastructure undergo periodic security assessments to identify and remediate vulnerabilities.

5.1 Data Retention Periods

hiabee retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention guidelines apply:

5.2 Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, hiabee will notify affected players without undue delay. Notification will be provided via the email address or mobile number registered to your account and will describe the nature of the breach, the data categories affected, and the steps hiabee is taking to address it.

As a hiabee player, you have a number of rights in relation to the personal data we hold about you. hiabee is committed to honouring these rights promptly and transparently. To exercise any of the rights below, please contact us at [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of Access: You may request a copy of all personal data hiabee holds about you, including the categories of data, the purposes for which it is processed, and any third parties to whom it has been disclosed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections can be made directly through your account profile settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Please note that certain data must be retained for legal and compliance reasons even after an account is closed, as described in Section 5.1.
• Right to Restriction: You may request that hiabee restricts the processing of your data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a structured, machine-readable copy of the personal data you have provided to hiabee.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing carried out on the basis of legitimate interests, though such objections are assessed on a case-by-case basis.

hiabee may send you promotional communications regarding bonuses, new game launches, sports betting previews (such as BPL cricket, IPL, T20 World Cup, and international football), and seasonal offers relevant to the Bangladesh market. These communications may be delivered via SMS to your registered mobile number, email to your registered address, or in-platform notifications when you are logged in.

7.1 Consent and Opt-Out

Marketing communications are sent only where you have provided consent at registration or where hiabee has a legitimate interest in informing you of closely related products and services. You may withdraw consent or opt out of all marketing communications at any time through the following channels:

• Via your hiabee account settings under the "Notifications & Marketing" section.
• By clicking the unsubscribe link included in every marketing email.
• By replying STOP to any marketing SMS sent from hiabee.
• By contacting the hiabee support team at [email protected] and requesting removal from all marketing lists.

Opt-out requests will be processed within 5 business days. Please note that opting out of marketing communications does not affect transactional messages — you will continue to receive account-related notifications such as deposit confirmations, withdrawal status updates, and security alerts, as these are essential to the operation of your account.

7.2 Responsible Gaming and Marketing

hiabee takes responsible gaming obligations seriously in its marketing practices. We will not send promotional or bonus marketing communications to players who have self-excluded, set a marketing opt-out, or been identified by our responsible gaming monitoring as potentially vulnerable. During self-exclusion periods, all marketing contact is suspended immediately. For more information on responsible gaming tools, please visit our Responsible Gaming page.

hiabee reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via email or in-platform notification before the changes take effect. The updated policy will be published on this page with a revised "Last Updated" date. Continued use of the hiabee platform following the notification period constitutes acceptance of the revised Privacy Policy.

We encourage you to review this page periodically to stay informed about how hiabee handles your personal data. If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data, please contact the hiabee data protection team using the details below:

• Email: [email protected]
• Subject line: Privacy Enquiry / Data Request
• Response time: Within 5 business days for general enquiries; within 30 days for formal data subject requests

For questions related to responsible gaming, account self-exclusion, or betting limits, please visit the Responsible Gaming page or contact our support team directly. For general platform questions, our FAQ page covers the most commonly asked topics.