Privacy Policy — How hdaje Protects Your Data

hdaje collects personal data from players and platform visitors through several channels: directly from you when you register or interact with the platform, automatically through your use of the site, and in some cases from third-party payment and identity verification providers. The categories of data we collect are set out below.

Registration and Account Data

When you create an hdaje account, we collect the following information: your full legal name, date of birth, residential address (including city, district, and postcode), email address, and mobile phone number. This data is required to establish your identity, enforce the 18+ age restriction, apply responsible gaming controls, and communicate with you about your account.

Identity Verification (KYC) Data

As part of our Know Your Customer process, hdaje may collect copies of official identity documents — including your National Identity Card (NID), passport, or driving licence — as well as proof of address documents such as utility bills or bank statements. Where required by our anti-money laundering controls, we may also request documentation relating to the source of deposited funds. KYC documents are stored securely and are not used for any purpose other than identity verification and compliance.

Financial Transaction Data

hdaje records all deposit and withdrawal transactions associated with your account. This includes transaction amounts denominated in Bangladeshi Taka (৳), transaction timestamps, payment method identifiers (such as the registered mobile number for bKash, Nagad, Rocket, or Upay accounts, or the masked card number for Visa and Mastercard transactions), and transaction reference numbers. Full payment credentials — such as complete card numbers or mobile banking PINs — are never stored by hdaje; they are handled exclusively by the relevant payment provider.

Betting and Gaming Activity Data

hdaje maintains a complete record of all bets, wagers, and casino game sessions associated with your account. This includes bet amounts, odds accepted, game titles and studio providers, session start and end times, and bet outcomes. This data is used to calculate account balances, detect potential problem gambling behaviour, identify suspicious wagering patterns, and resolve any disputes relating to game outcomes.

Technical and Device Data

When you access hdaje.com, our servers automatically record certain technical data including your IP address, browser type and version, operating system, device type, referring URL, pages visited, session duration, and click-path data. This data is used to maintain platform security, detect fraudulent or automated access, and optimise the platform for the devices and browsers most commonly used by players in Bangladesh.

Communications Data

If you contact hdaje's support team via email at [email protected] or through any in-platform messaging channel, we retain records of those communications — including the content of messages, timestamps, and any attachments — for the purpose of resolving your query, training support staff, and maintaining an audit trail of player interactions.

hdaje processes your personal data only for specific, defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which hdaje processes personal data are as follows:

Where hdaje relies on your consent as the legal basis for processing — for example, sending promotional emails about new bonuses, BPL cricket betting markets, or slot game releases — you may withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

hdaje does not use automated decision-making processes that produce legal or similarly significant effects on players without human oversight. Where automated systems flag an account for review — for example, for suspected bonus abuse or unusual betting patterns — a qualified member of the hdaje compliance team reviews the case before any account action is taken.

hdaje uses cookies — small text files stored on your device by your browser — and similar tracking technologies including local storage and session tokens to ensure the platform functions correctly and to deliver a consistent, personalised experience. This section explains what categories of cookies we use and how you can manage them.

Strictly Necessary Cookies

These cookies are essential for the hdaje platform to function. They maintain your login session, remember your language and currency preferences, and support the security mechanisms that protect your account. Strictly necessary cookies cannot be disabled without preventing you from using core platform features. They do not collect any information that could be used to identify you for marketing purposes.

Analytics Cookies

hdaje uses first-party analytics cookies to understand how players navigate the platform — which pages are visited most frequently, where users exit the registration flow, and which game categories attract the most engagement. This data is aggregated and anonymised before analysis and is used solely to improve the platform experience for Bangladeshi players. hdaje does not use Google Analytics or any third-party analytics service that sends your data to external servers for cross-site profiling.

Functional Cookies

Functional cookies allow hdaje to remember choices you have made — such as your preferred deposit method (bKash, Nagad, or bank transfer) or your last-visited game category — so that you do not have to reset these preferences on each visit. These cookies are set only after you have created an account and are cleared when you close your account or reset your preferences.

Managing Cookies

Most browsers allow you to view, manage, and delete cookies through the browser's settings menu. Please note that disabling strictly necessary cookies will impair your ability to use the hdaje platform. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation. Continuing to use hdaje.com after being presented with this Policy constitutes acceptance of our use of cookies as described above.

hdaje does not sell, rent, or otherwise commercially exploit your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Service Providers

To process your deposits and withdrawals, hdaje shares relevant transaction data with your chosen payment provider — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each of these providers operates under its own privacy policy and data protection obligations. hdaje shares only the minimum data required to execute the transaction; it does not transmit your full account profile to payment providers.

Identity Verification Partners

Where hdaje uses a third-party KYC or identity verification service to validate player identity documents, the relevant document data is transmitted to that provider over an encrypted channel. KYC partners are contractually bound to process data solely for identity verification purposes and are prohibited from retaining or further sharing that data.

Game Software Providers

Casino games on hdaje are delivered by internationally licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive a session token and anonymised player identifier to facilitate gameplay and record game outcomes. They do not receive your full personal profile, payment details, or contact information.

Legal and Regulatory Disclosures

hdaje may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction. In such cases, hdaje will disclose only the data specifically required and will, where legally permissible, notify the affected player of the disclosure.

Fraud Prevention Services

hdaje participates in industry fraud prevention networks. Where an account is found to have engaged in fraud, bonus abuse, or money laundering, relevant data may be shared with partner platforms and fraud prevention databases to prevent repeat offences across the industry. This sharing is conducted on the basis of legitimate interest and legal obligation.

hdaje retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. The retention periods below represent our standard practices; in some cases, data may need to be retained for longer where subject to a legal hold or ongoing investigation.

All personal data held by hdaje is stored on servers protected by access controls, encryption at rest, and regular security auditing. hdaje does not store personal data on servers located in jurisdictions without adequate data protection standards. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be associated with any individual player.

Where a player requests account closure, hdaje will cease active processing of that player's data immediately upon confirming closure. Data retained post-closure is archived, access-restricted, and used solely to satisfy the compliance obligations described in the table above.

As a player on the hdaje platform, you hold a number of rights in relation to your personal data. hdaje is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, contact the hdaje data team at [email protected], clearly stating the right you wish to exercise and providing sufficient information to verify your identity.

• Right of Access: You have the right to request a copy of all personal data hdaje holds about you. We will provide this in a structured, commonly used format within 30 days of your verified request.
• Right to Rectification: If any personal data hdaje holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Players can update basic account information directly in account settings; for corrections to KYC data, contact [email protected].
• Right to Erasure: You may request that hdaje delete your personal data. This right is subject to our legal retention obligations — we cannot erase data that we are legally required to retain. Where erasure is possible, it will be completed within 30 days.
• Right to Restriction of Processing: You may request that hdaje temporarily restrict processing of your data — for example, while a dispute is being resolved — without requiring full erasure.
• Right to Data Portability: You have the right to receive a copy of data you have provided to hdaje in a machine-readable format, and to request that we transmit this data directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interest — for example, profiling for responsible gaming monitoring purposes. hdaje will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

hdaje will respond to all privacy rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reasons for it within the initial 30-day period. hdaje does not charge a fee for processing privacy rights requests unless a request is manifestly unfounded or repetitive, in which case a reasonable administrative fee may be applied.

hdaje implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect the personal data of every registered player from unauthorised access, disclosure, alteration, or destruction.

Technical Controls

All data in transit between your device and hdaje's servers is protected by TLS 1.2 or higher encryption. Data at rest — including stored account records, KYC documents, and financial transaction logs — is encrypted using AES-256 encryption. Access to production databases is restricted to authorised personnel only, protected by multi-factor authentication and role-based access controls. hdaje conducts regular penetration testing and vulnerability scanning of its platform infrastructure.

Operational Procedures

hdaje maintains a formal information security policy that governs how staff interact with player data. Access to personal data is granted on a strict need-to-know basis. Staff who handle personal data undergo data protection training as part of their onboarding and on an annual basis thereafter. hdaje maintains a documented incident response procedure that requires any data breach to be assessed, contained, and — where required — reported within 72 hours of discovery.

Reporting a Security Concern

If you believe your hdaje account has been accessed without your authorisation, or if you identify a potential security vulnerability on the platform, you must contact hdaje immediately at [email protected]. Include as much detail as possible about the suspected incident. hdaje treats all security reports as high priority and will acknowledge receipt within 24 hours during Bangladesh Standard Time (BST, UTC+6) business hours.

While hdaje takes all reasonable and practicable steps to protect your personal data, no online platform can guarantee absolute security. Players are reminded to use strong, unique passwords for their hdaje accounts, to avoid accessing their accounts on shared or public devices, and to enable any additional security features available in account settings.

hdaje reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, platform operations, or data processing practices. When we make material changes to this Policy, we will post the updated version on this page with a revised effective date. Where changes are significant, we will notify registered players via the email address associated with their account.

Continued use of the hdaje platform following the posting of an updated Privacy Policy constitutes acceptance of the revised Policy. Players who do not agree with the updated Policy should cease using the platform and contact [email protected] to request account closure and deletion of their personal data to the extent permitted by our retention obligations.

This Privacy Policy was last updated in January 2026 and applies to all personal data collected by hdaje from that date. For personal data collected prior to this date, hdaje has reviewed its processing practices to ensure alignment with the principles set out in this Policy.

Contact the hdaje Data Team

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by hdaje, please contact us at: [email protected]. All privacy-related inquiries are handled by the hdaje compliance and data team and will receive a substantive response within 10 business days of receipt.

Players located in Bangladesh who feel their privacy rights have not been adequately addressed by hdaje after raising the matter directly with our team may escalate the complaint through the relevant dispute resolution process described in our Terms & Conditions.