hvaji Privacy Policy

hvaji collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the website, and from third-party identity verification and payment service providers. The categories of data we collect are described below.

1.1 Registration Data

When you create an hvaji account, we collect the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify the 18+ age requirement).
• Email address (used for account communications and security alerts).
• Bangladeshi mobile number (used for account verification and bKash/Nagad payment linkage).
• Residential address in Bangladesh.
• Username and encrypted password.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to process withdrawal requests above applicable thresholds, we may collect copies of the following documents:

• National Identity Card (NID) — front and back.
• Valid passport (photo page).
• Proof of address (utility bill, bank statement, or equivalent dated within 90 days).
• Selfie photograph taken at the time of verification for facial comparison purposes.

1.3 Financial Transaction Data

hvaji records all deposit and withdrawal transactions associated with your account, including transaction amounts in BDT, timestamps, payment method identifiers (e.g., the last four digits of a card or a registered bKash number), and transaction reference numbers assigned by our payment partners. We do not store full card numbers or mobile banking credentials on hvaji servers.

1.4 Betting and Gaming Activity Data

We maintain a comprehensive record of all bets placed, games played, bonus activations, wagering history, and account balance movements. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

1.5 Technical and Device Data

When you access hvaji.net, our systems automatically collect certain technical information, including:

• IP address and approximate geographic location derived from IP.
• Browser type, version, and operating system.
• Device type and screen resolution.
• Pages visited, session duration, and navigation path within the platform.
• Referral source (the URL from which you arrived at hvaji.net, if applicable).

1.6 Communications Data

If you contact hvaji's support team via email or live chat, we retain a record of that correspondence, including your contact details, the content of your messages, and the resolution provided. These records are maintained for quality assurance and dispute resolution purposes.

1.7 Summary of Data Categories and Legal Basis

hvaji processes personal data for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

2.1 Account Management and Service Delivery

Your registration and KYC data is used to create and maintain your hvaji account, authenticate your identity at login, process deposits and withdrawals, credit and debit your account balance accurately, and provide you with access to all betting and casino services on the platform.

2.2 Fraud Prevention and Security

hvaji uses technical data, transaction patterns, and device information to detect and prevent fraudulent activity, including account takeover attempts, bonus abuse, money laundering, and the use of automated betting tools. Accounts flagged by our fraud detection systems may be subject to additional identity verification or temporary restriction pending investigation.

2.3 Responsible Gaming Monitoring

We analyse betting and gaming activity data to identify patterns that may indicate problem gambling behaviour, such as escalating bet sizes following losses, extended uninterrupted session durations, or requests to self-exclude followed by attempts to re-register. This monitoring is conducted in the interest of player welfare and is consistent with our Responsible Gaming Policy.

2.4 Regulatory Compliance

hvaji is required to retain and, where legally obligated, disclose certain categories of player data to comply with applicable anti-money laundering (AML) legislation, age verification requirements, and any other legal obligations that apply to the operation of our platform.

2.5 Platform Improvement and Analytics

Aggregated, anonymised technical and usage data is analysed to understand how players interact with hvaji.net, identify performance bottlenecks, test new features, and optimise the overall platform experience. This analysis does not involve any individual-level profiling for marketing purposes.

2.6 Customer Support

Communications data is used to investigate and resolve support queries, track open tickets, and improve the quality and responsiveness of the hvaji support team. Support records may be reviewed by senior staff during quality assurance reviews.

2.7 Promotional Communications

If you have explicitly opted in to marketing communications during registration, hvaji may send you promotional emails relating to new games, seasonal offers (such as Eid or BPL tournament promotions), or deposit bonuses. You may withdraw consent for marketing communications at any time by contacting [email protected] or following the unsubscribe link included in every marketing email.

hvaji does not sell or rent personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, hvaji shares necessary transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. Each payment partner operates under its own privacy policy and data protection obligations. hvaji shares only the minimum data required to complete the transaction — we do not share full account history or betting records with payment providers.

3.2 Identity Verification Partners

To fulfil our KYC obligations, we may pass identity document images and registration data to third-party identity verification service providers. These providers are contractually bound to process the data solely for the purpose of identity verification and to maintain appropriate data security standards.

3.3 Game Software Providers

Casino and sportsbook software providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data (such as a session token and account-level identifier) to facilitate game delivery. These providers do not receive your name, NID, or financial account details.

3.4 Legal and Regulatory Disclosure

hvaji may be required to disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where such disclosure is mandated by applicable law, a court order, or a lawful regulatory request. In such cases, hvaji will disclose only the data specifically requested and will, where legally permitted, notify the affected player.

3.5 Business Transfers

In the event that hvaji undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, player personal data held at the time of the transaction may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via a prominent notice on hvaji.net and will be given the opportunity to request deletion of their data prior to the transfer taking effect.

hvaji.net uses cookies and similar tracking technologies to operate core platform functions, maintain session security, and gather anonymised performance data. A cookie is a small text file placed on your device by the website. The following categories of cookies are used on hvaji.net:

4.1 Strictly Necessary Cookies

These cookies are essential for the hvaji platform to function correctly. They include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. Without these cookies, core features such as account login, deposit processing, and bet placement cannot operate. These cookies cannot be disabled without breaking platform functionality.

4.2 Performance and Analytics Cookies

hvaji uses first-party analytics cookies to collect anonymised data about how players navigate the platform — which pages are visited most frequently, where players encounter errors, and how long sessions last. This data is used exclusively to improve platform performance and user experience. No individual player is identified in analytics reports.

4.3 Preference Cookies

Preference cookies remember your selected settings, such as your preferred deposit method or interface language, so that you do not need to re-enter these preferences on subsequent visits. These cookies are set only after you have made a specific selection within the platform.

4.4 What hvaji Does NOT Use

hvaji does not deploy the following cookie types on hvaji.net:

• Third-party advertising or retargeting cookies (e.g., Google Ads, Facebook Pixel, or similar).
• Cross-site tracking cookies that follow your browsing activity on other websites.
• Social media integration cookies that link your hvaji activity to social media profiles.

4.5 Managing Cookies

You may control and delete cookies through your browser's settings at any time. Please note that disabling strictly necessary cookies will impair or prevent access to the hvaji platform. Disabling performance or preference cookies will not affect your ability to place bets or make transactions, but may result in a less personalised experience.

hvaji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where anonymisation is not technically feasible, data is securely destroyed in accordance with industry-standard data disposal procedures.

As an hvaji player, you hold meaningful rights over the personal data we process about you. hvaji is committed to honouring these rights promptly and without unnecessary barriers. The following rights apply to all registered players:

6.1 Right of Access

You have the right to request a copy of all personal data that hvaji holds about you. Upon receiving a verified access request, we will provide a structured, readable summary of your data within 30 days. To submit a data access request, please email [email protected] with the subject line "Data Access Request — [Your Username]".

6.2 Right to Rectification

If any personal data held by hvaji about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as a misspelled address) can typically be processed by the support team during normal account management. Changes to core identity data (name, date of birth) will require supporting documentation.

6.3 Right to Erasure

You may request that hvaji delete your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been unlawfully processed. Please note that erasure requests cannot be fulfilled where retention is required by law — for example, financial transaction records subject to the mandatory retention periods described in Section 5 above.

6.4 Right to Restrict Processing

In certain circumstances — such as while a data accuracy dispute is under investigation — you may request that hvaji restrict the processing of your personal data to storage only. During a restriction period, your data will not be used for any other purpose.

6.5 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time. To opt out of all marketing communications from hvaji, email [email protected] with the subject line "Marketing Opt-Out — [Your Username]". Opt-out requests are processed within 5 business days.

6.6 How to Exercise Your Rights

All privacy rights requests should be submitted in writing to [email protected]. Please include your registered username and a brief description of your request. hvaji will verify your identity before processing any rights request and will respond within 30 calendar days of receiving a complete, verifiable request.

hvaji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. While no system can guarantee absolute security, our layered approach significantly reduces the risk of data incidents.

7.1 Encryption in Transit

All data transmitted between your device and hvaji.net is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. This protects your login credentials, payment information, and personal data from interception during transmission. You should always verify the padlock indicator in your browser's address bar before entering any information on hvaji.net.

7.2 Encryption at Rest

Personal data stored in hvaji's databases is encrypted at rest using AES-256 encryption. Passwords are stored as salted cryptographic hashes — not in plaintext — so that they cannot be read even by hvaji's internal technical staff.

7.3 Access Controls

Access to player personal data within hvaji's internal systems is governed by role-based access controls. Only staff members who require access to specific data categories in order to perform their job functions are granted that access. All internal data access is logged and periodically reviewed by the security team.

7.4 Incident Response

In the event of a data security incident that poses a material risk to player personal data, hvaji will notify affected players by email within a reasonable timeframe following discovery of the incident. The notification will describe the nature of the incident, the categories of data affected, and the steps hvaji has taken in response. hvaji will also notify any applicable regulatory or supervisory authorities where required by law.

7.5 Your Role in Security

While hvaji maintains strong platform-side security, players also bear responsibility for protecting their own account. You should: use a strong, unique password for your hvaji account that you do not reuse on other platforms; never share your password or OTP codes with anyone, including hvaji support staff (we will never ask for these); log out of your account after each session on shared devices; and contact [email protected] immediately if you suspect unauthorised access.

8.1 Changes to This Privacy Policy

hvaji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will display a prominent notice on hvaji.net and, where we hold a verified email address for your account, send a notification email. The "Last Updated" date at the top of this page and in the hero section indicates the most recent revision.

Continued use of the hvaji platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should request closure of your account before the updated policy takes effect.

8.2 Children's Privacy

hvaji is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a person under 18 has provided personal data to hvaji, we will take immediate steps to delete that data and permanently close the associated account. Parents or guardians who believe a minor has registered an account on hvaji should contact [email protected] immediately.

8.3 Links to Third-Party Sites

hvaji.net does not contain links to third-party external websites. In the event that any integration with a third-party service directs you to an external domain, please be aware that hvaji's Privacy Policy does not apply to those external sites. hvaji has no control over and accepts no responsibility for the privacy practices of third-party websites.

8.4 Contact the hvaji Privacy Team

For all privacy-related enquiries, data rights requests, or to report a suspected data security incident, please contact the hvaji data protection team using the details below. Communications must be in English. We aim to acknowledge all privacy enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days.