h5bj Privacy Policy

h5bj collects personal data through several channels during your interaction with the platform. The categories of personal data we collect include the following:

1.1 Registration and Account Data

When you create an h5bj account, we collect the information you provide directly, including your full legal name, date of birth, residential address in Bangladesh, email address, and mobile phone number. This information is necessary to establish and maintain your account.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or driver's licence, together with proof of address documents such as a utility bill or bank statement. KYC data is collected to verify your identity, confirm your age (21+ requirement), and comply with applicable anti-money laundering obligations.

1.3 Financial Transaction Data

We collect details of all deposits and withdrawals made through your h5bj account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), transaction amounts in Bangladeshi Taka (৳), transaction dates and times, and payment reference numbers. We do not store full payment card numbers on our servers — card data is processed and held by our PCI-DSS compliant payment processing partners.

1.4 Gaming Activity Data

We collect records of all gaming and betting activity conducted through your account, including games played, bet amounts, win/loss records, session durations, and responsible gaming tool usage (deposit limits, cool-off periods, self-exclusion requests).

1.5 Technical and Device Data

When you access h5bj, we automatically collect certain technical data about your device and connection, including your IP address, browser type and version, operating system, device identifiers, and general geographic location derived from IP address. This data is used to secure your account, detect fraudulent activity, and improve platform performance.

1.6 Communications Data

We retain records of communications between you and the h5bj support team, including emails sent to [email protected], live chat transcripts, and any formal complaints or dispute correspondence. This data is retained for quality assurance and dispute resolution purposes.

h5bj uses the personal data we collect for the following purposes:

h5bj will not use your personal data for any purpose not listed above without first obtaining your explicit consent or being required to do so by applicable law.

h5bj processes your personal data on the following legal bases:

• Contractual necessity: Processing your registration data, KYC documents, and financial transaction data is necessary to perform our contractual obligations to you — specifically, to operate your account and deliver the gaming and betting services you have requested.
• Legal obligation: Certain processing activities — including identity verification, age checks, anti-money laundering monitoring, and record retention — are required by applicable laws and regulations. h5bj must carry out this processing to remain compliant.
• Legitimate interests: h5bj processes technical data, device data, and gaming activity data on the basis of our legitimate interest in preventing fraud, securing the platform, detecting multi-accounting, and improving the quality of our services for all players.
• Consent: Where we process your data for marketing and promotional communications, we do so on the basis of your explicit consent, which you may withdraw at any time.

h5bj does not sell, rent, or trade your personal data to any third party. We may, however, share your personal data with trusted third parties in the following limited circumstances:

• Payment processors: To facilitate deposits and withdrawals, we share necessary transaction data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These partners process your payment data under their own privacy policies and are contractually obligated to maintain appropriate data security standards.
• Game providers: Game content on h5bj is delivered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as a session token or game result log) to deliver their game services. They do not receive your full personal profile.
• KYC and identity verification providers: We may use third-party identity verification services to assist with processing KYC documents. These providers handle your identity documents under strict confidentiality agreements.
• Fraud and AML screening providers: To detect suspicious activity and comply with anti-money laundering obligations, we may pass transaction and account data through automated screening systems operated by approved compliance technology providers.
• Law enforcement and regulatory authorities: h5bj will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, court order, or in connection with the prevention or detection of criminal activity.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving h5bj, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via the h5bj platform.

All third parties with whom h5bj shares personal data are contractually required to process that data only for the purposes specified, to maintain appropriate technical and organisational security measures, and to comply with applicable data protection laws.

h5bj uses cookies and similar tracking technologies on the h5bj.bio platform. Cookies are small text files stored on your device when you visit a website. They help us deliver a consistent and personalised experience, maintain session security, and understand how players interact with our platform.

We use the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the platform to function correctly. They enable core functionality such as account login sessions, security token management, and fraud prevention checks. These cookies cannot be disabled without severely impairing your ability to use h5bj.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred language (English) and display options — so you do not need to re-configure them on each visit.
• Analytics cookies: We use anonymised, aggregated analytics data to understand how players navigate the platform, which games are most popular, and where technical issues may arise. This data does not identify you personally and is used solely to improve the h5bj platform experience.
• Security cookies: These cookies help h5bj detect and prevent fraudulent logins, suspicious IP activity, and multi-accounting attempts by linking session data to verified device profiles.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the h5bj platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate securely.

h5bj retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated statistical and platform improvement purposes.

h5bj respects your rights over your personal data. As an h5bj player, you have the following rights with respect to the personal data we hold about you:

• Right of access: You have the right to request a copy of all personal data that h5bj holds about you. We will provide this information in a clear, structured format within 30 days of receiving your request.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details directly through your h5bj account settings.
• Right to erasure: You may request that h5bj delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that erasure requests cannot override mandatory legal retention obligations — for example, financial transaction records required for AML compliance cannot be deleted on request.
• Right to restriction of processing: You may request that h5bj restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact h5bj at [email protected] with the subject line "Privacy Rights Request". Please include your full name and registered email address so that we can verify your identity before processing your request. We will respond within 30 days. In exceptional cases involving complex requests, the response period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day window.

h5bj takes the security of your personal data extremely seriously. We have implemented a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

Our key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and h5bj's servers is encrypted using 256-bit SSL/TLS protocols, which is the same standard used by major international banks and financial institutions.
• Secure data storage: All personal data stored on h5bj's servers is encrypted at rest using AES-256 encryption. Access to stored data is restricted to authorised personnel only, on a strict need-to-know basis.
• Access controls: h5bj's internal systems operate on a role-based access control model. Staff members can only access the personal data necessary for their specific job function. All access is logged and regularly audited.
• Fraud detection systems: h5bj operates automated fraud detection and anti-money laundering monitoring systems that continuously analyse account activity, transaction patterns, and login behaviour to detect and respond to suspicious activity in real time.
• Secure payment processing: All payment card transactions processed through h5bj are handled by PCI-DSS Level 1 compliant payment partners. Full card numbers are never stored on h5bj's own servers.
• Regular security reviews: h5bj conducts periodic internal security reviews and vulnerability assessments to identify and address potential weaknesses in our systems before they can be exploited.
• Staff training: All h5bj staff who handle personal data receive regular training on data protection obligations, secure data handling practices, and how to recognise and respond to potential data security incidents.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, h5bj will notify affected players without undue delay and will take all reasonable steps to contain and mitigate the impact of the breach.

h5bj is strictly an adult platform. Access to and use of h5bj is permitted only for individuals who are 21 years of age or older. We do not knowingly collect, process, or store personal data from individuals under the age of 21.

As part of our registration and KYC process, all players are required to confirm their date of birth and provide valid government-issued identity documentation to verify that they meet the 21+ age requirement. Accounts that cannot be verified as belonging to an adult aged 21 or above will be suspended and any funds held in those accounts will be dealt with in accordance with our Terms & Conditions and applicable legal requirements.

If h5bj becomes aware, or has reasonable grounds to suspect, that an account is being used by or on behalf of a person under the age of 21, we will immediately:

• Suspend the account pending investigation.
• Refuse to process any pending deposit or withdrawal requests associated with the account.
• Delete any personal data collected from the underage individual that is not required to be retained for legal compliance purposes.
• Report the matter to relevant authorities where required by applicable law.

If you are a parent or guardian and believe that your child under the age of 21 has created an account or provided personal data to h5bj, please contact us immediately at [email protected] with the subject line "Underage Account Report" and we will investigate and take appropriate action promptly.

The h5bj platform may contain references to or integrations with third-party services, including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These third-party services operate under their own privacy policies and data processing practices, which are entirely independent of h5bj.

h5bj is not responsible for the privacy practices, data collection activities, security measures, or content of any third-party services integrated into or accessible through the platform. Your interactions with third-party game providers — for example, data passed between your game session and the provider's game server — are governed by that provider's own privacy terms.

We recommend that you review the privacy policies of any third-party service provider with whom you interact through h5bj to understand how your data may be handled by those parties. If you have concerns about how a specific game provider or payment partner processes your data, please contact that party directly.

h5bj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will notify registered players via the email address associated with their h5bj account.

The most current version of this Privacy Policy will always be accessible at h5bj.bio/privacy-policy. We encourage you to review this page periodically to stay informed about how h5bj collects and uses your personal data.

Your continued use of the h5bj platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any changes made to this Policy, you must cease using the platform and may request account closure by contacting [email protected].

The following types of changes may prompt an update to this Privacy Policy:

• Introduction of new data collection activities or processing purposes.
• Changes to the third-party service providers with whom we share data.
• Updates to retention periods or security practices.
• New legal or regulatory obligations affecting our data processing activities.
• Changes to player rights or the procedures for exercising those rights.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which h5bj processes your personal data, please contact our dedicated privacy support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy enquiries: "Privacy Policy Query"
• Subject line for data rights requests: "Privacy Rights Request"
• Subject line for underage account reports: "Underage Account Report"
• Response time: Within 48 hours for general privacy queries; within 30 days for formal data rights requests.
• Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).
• Language: English support available at all times.

When submitting a privacy rights request, please include your full name, your registered h5bj email address, and a clear description of your request so that we can verify your identity and process your request efficiently.