hadjee Privacy Policy

1. Introduction

hadjee ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the hadjee platform at hadjee.com (the "Platform"). This Privacy Policy sets out in clear terms what personal information we collect from players and visitors, the purposes for which that information is used, the conditions under which it may be disclosed to third parties, and the rights that individuals hold in respect of their own data.

This Privacy Policy applies to all users of the hadjee Platform, including registered account holders, visitors who browse the Platform without registering, and individuals who contact hadjee support. It covers data collected through the hadjee website, any mobile-optimised interface, and all related services offered under the hadjee brand.

This Privacy Policy should be read in conjunction with the hadjee Terms & Conditions, which govern your overall use of the Platform. Defined terms used in this Privacy Policy carry the same meanings as those set out in the Terms & Conditions unless otherwise specified.

2. Data Controller

hadjee acts as the data controller in respect of the personal data processed under this Privacy Policy. As data controller, hadjee determines the purposes and means of processing personal data collected through the Platform. If you have any questions or concerns about how your data is being processed, you may contact hadjee directly using the details provided in Section 16 of this policy.

3. Data We Collect

hadjee collects the following categories of personal data:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth (for age verification purposes);
• Residential address, including city and postal code (Dhaka, Chittagong, Sylhet, or other Bangladesh locations);
• Contact telephone number;
• Email address registered on your hadjee account.

3.2 Account & Verification Data

• hadjee username and encrypted account credentials;
• Copies of identity documents submitted during KYC verification (National ID Card, passport, or birth certificate);
• Proof of address documents (utility bills, bank statements);
• Selfie or liveness-check images where requested for advanced verification.

3.3 Financial & Transaction Data

• Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay numbers) — stored as masked references, never as full credentials;
• Bank account details where bank transfer is used as a payment method;
• Deposit and withdrawal amounts, timestamps, and transaction reference numbers;
• Running account balance and transaction history within the hadjee Platform.

3.4 Gaming Activity Data

• Game session logs including start/end times, stake amounts, and results;
• Sports betting history including markets wagered, odds accepted, and settlement outcomes;
• Bonus and promotional credit usage history;
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status).

3.5 Technical & Device Data

• IP address at time of registration and subsequent logins;
• Device type, operating system, and browser version;
• Geolocation data (country and city level, derived from IP address);
• Session duration and navigation behaviour within the Platform.

3.6 Communications Data

• Records of correspondence with hadjee support, including emails and chat transcripts;
• Feedback and survey responses where voluntarily submitted;
• Marketing preference settings (opt-in or opt-out status for promotional communications).

4. How We Collect Your Data

hadjee collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting hadjee support;
• Automated collection: Technical and device data collected automatically when you access the hadjee Platform, via server logs, session tracking, and cookies (see Section 9);
• Third-party sources: Identity and fraud-screening data received from payment service providers (bKash, Nagad, Rocket) and identity verification service providers engaged by hadjee for KYC purposes;
• Publicly available sources: In limited circumstances, hadjee may cross-reference publicly available information to verify the accuracy of data you have provided.

5. How We Use Your Data

hadjee uses the personal data it collects for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, contact, account data
Age and identity verification (KYC)	Identity, verification documents
Processing deposits and withdrawals	Financial, transaction, identity data
Delivering gaming services	Gaming activity, account data
Fraud detection and prevention	Technical, financial, identity data
Responsible gaming compliance	Gaming activity, account, communications data
Customer support and dispute resolution	Communications, account, transaction data
Sending account notifications (non-marketing)	Contact, account data
Sending promotional communications (opt-in only)	Contact, communications preference data
Platform performance and improvement	Technical, device, gaming activity data
Legal and regulatory compliance	All categories as required

6. Legal Basis for Processing

hadjee processes personal data under the following legal bases:

• Contract performance: Processing necessary to create and manage your hadjee account and to deliver the gaming and payment services you have requested;
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering obligations, age verification requirements, and record-keeping mandates;
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your privacy rights;
• Consent: Processing for optional purposes such as sending promotional communications, where you have provided explicit opt-in consent and which you may withdraw at any time.

7. Sharing Your Data

7.1 hadjee does not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners, solely to process deposit and withdrawal transactions you have initiated;
• Identity verification providers: Third-party KYC service providers engaged by hadjee to assist with age and identity verification — these providers process data under strict contractual confidentiality obligations;
• Fraud and security services: Third-party fraud screening and IP intelligence providers used to detect and prevent prohibited conduct on the Platform;
• Game software providers: Accredited game studios (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming) receive only the minimum session-level data required to deliver game functionality — no full identity data is shared with game providers;
• Legal and regulatory authorities: Where hadjee is required by applicable law, court order, or regulatory direction to disclose personal data to a competent authority.

7.2 All third parties who receive personal data from hadjee are required by contract to process that data only for the specified purpose, to apply appropriate security standards, and to delete it once the purpose has been fulfilled.

8. Payment Data

8.1 All payment transactions on hadjee are processed via secure, encrypted connections. hadjee does not store full bKash, Nagad, or Rocket account credentials on its own servers. Payment identifiers are tokenised and stored in masked format solely for the purpose of matching withdrawal requests to verified funding sources.

8.2 Bank account details provided for withdrawal processing are stored in encrypted form and are accessible only to authorised hadjee finance personnel on a strict need-to-know basis.

8.3 Transaction records (amounts, timestamps, reference numbers) are retained for a minimum of five years from the date of transaction to satisfy hadjee's legal record-keeping obligations under applicable financial regulations.

9. Cookies & Tracking Technologies

9.1 hadjee uses cookies and similar technologies (including session tokens and local storage) to operate the Platform and to improve your experience. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a gaming session. Essential cookies cannot be disabled without preventing use of the Platform.
• Functional cookies: Store your Platform preferences (such as language settings and responsible gaming tool configurations) so that they persist across sessions.
• Analytics cookies: Collect anonymised, aggregated data about how players navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is used to improve Platform performance and is not linked to individual player identities.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and suspicious session behaviour.

9.2 hadjee does not use third-party advertising or retargeting cookies. No player behaviour data is shared with advertising networks or social media platforms for the purpose of serving targeted advertisements.

9.3 You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair or prevent access to the hadjee Platform.

10. Data Retention

hadjee retains personal data for the following periods:

• Account and identity data: Retained for the duration of your active hadjee account plus a minimum of five years following account closure, to fulfil legal and regulatory obligations;
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction;
• Gaming activity logs: Retained for three years from the date of the gaming session, unless a longer period is required for an ongoing dispute or regulatory investigation;
• Support communications: Retained for two years from the date of the final communication in each support thread;
• Technical and device logs: Retained for 90 days from collection for security and fraud monitoring purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted from hadjee's systems or irreversibly anonymised so that it can no longer be linked to any individual.

11. Security Measures

11.1 hadjee implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and hadjee servers;
• Encryption at rest for sensitive data categories including identity documents, financial identifiers, and account credentials;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for hadjee administrative systems;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Automated monitoring for suspicious login activity and unusual transaction patterns.

11.2 While hadjee takes all reasonable precautions to protect your data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own hadjee account credentials. If you suspect that your account has been compromised, you must contact hadjee support immediately at support@hadjee.com.

12. Your Data Rights

As a hadjee player, you hold the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data hadjee holds about you. hadjee will provide this within 30 days of a verified request.
• Right to rectification: If any personal data hadjee holds about you is inaccurate or incomplete, you may request that it be corrected. Minor corrections (such as address updates) may be made directly through your account settings panel.
• Right to erasure: You may request deletion of your personal data. hadjee will honour erasure requests subject to the retention obligations described in Section 10. Data that hadjee is legally required to retain cannot be deleted before the applicable retention period expires.
• Right to restrict processing: You may request that hadjee temporarily suspend processing of your personal data in certain circumstances, such as while the accuracy of the data is being disputed.
• Right to data portability: You may request that hadjee provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider where technically feasible.
• Right to withdraw consent: Where hadjee processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting hadjee support.
• Right to object: You may object to processing of your personal data carried out on the basis of hadjee's legitimate interests where you believe such interests are overridden by your own privacy rights.

To exercise any of the above rights, please contact hadjee support in writing at support@hadjee.com. hadjee will acknowledge your request within 48 hours and will respond substantively within 30 days. hadjee reserves the right to verify your identity before processing a data rights request.

13. Minors

hadjee's services are strictly for individuals aged 18 years and above. hadjee does not knowingly collect or process personal data from individuals under the age of 18. If hadjee discovers that a minor has registered an account or submitted personal data, that account will be closed immediately, all associated data will be deleted, and any funds held in the account will be returned to the depositing payment method where technically possible.

If you believe that a minor has accessed or registered on hadjee, please notify us immediately at support@hadjee.com so that appropriate action can be taken without delay.

14. Third-Party Links

The hadjee Platform may contain references to third-party services, including payment providers such as bKash, Nagad, and Rocket. These third-party services operate independently of hadjee and are governed by their own privacy policies. hadjee is not responsible for the privacy practices of third-party services and encourages you to review their respective privacy policies before providing any personal data to them directly.

15. Changes to This Privacy Policy

15.1 hadjee reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — hadjee will provide advance notice of at least 14 days via a prominent notice on the Platform and, where appropriate, via direct communication to your registered contact method.

15.2 Your continued use of the hadjee Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. The most current version of this Privacy Policy is always available at hadjee.com/privacy-policy, and the "Last Updated" date at the top of this page will reflect any revision.

15.3 If you do not agree with the terms of any revised Privacy Policy, you must cease using hadjee and may request closure of your account by contacting hadjee support prior to the effective date of the change.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by hadjee, please contact us using the following details:

• Email: support@hadjee.com
• Subject line for data requests: "Privacy Request – [Your hadjee Username]"
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Acknowledgement within 48 hours; substantive response within 30 days

Please include your registered account username, a clear description of your request or concern, and any supporting information that will help hadjee locate the relevant records. All privacy-related requests are handled by hadjee's designated data protection contact and are treated with strict confidentiality.