Privacy Policy — How hdaji Protects Your Data

Section 1

Information We Collect

hdaji collects personal information from you in two primary ways: information you provide directly when registering and using the platform, and information collected automatically as you interact with our website and services. We collect only the data that is necessary for the operation of our platform, fulfilment of legal obligations, and delivery of a secure, personalised experience.

The categories of personal information we collect are described in full below. Where collection is required by law or necessary for the performance of our contract with you, you may not be able to use certain features of hdaji if you decline to provide that data.

hdaji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information — except where health-related data is voluntarily provided in the context of a responsible gaming request (for example, when a player self-declares a gambling problem and requests self-exclusion). Such data is handled with the highest level of confidentiality and used solely for the purpose stated.

We do not collect data from children. The hdaji platform is strictly for persons aged 18 years and above. If we become aware that we have inadvertently collected data from a person under the age of 18, we will immediately delete that data and close the associated account.

Section 2

How We Use Your Data

hdaji processes your personal data only for lawful purposes. The legal bases on which we rely are: performance of the contract between you and hdaji (i.e., providing the platform and services you have signed up for); compliance with legal obligations applicable to our operations; protection of legitimate interests (including fraud prevention and platform security); and, where applicable, your explicit consent.

The table below summarises the specific purposes for which each category of data is used:

hdaji will never use your personal data for purposes incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis. If the purpose for which we process your data changes materially, we will notify you via email and — where required — request fresh consent before proceeding.

Section 3

Cookies & Tracking Technologies

hdaji uses cookies and similar tracking technologies to operate the platform, remember your preferences, detect fraud, and measure platform performance. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other data on your device. They are used solely for the purposes described in this section.

Most web browsers automatically accept cookies by default. You can control and delete cookies through your browser's settings. However, disabling cookies other than strictly necessary ones may affect the functionality of certain features of hdaji, including session persistence and personalisation. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

hdaji does not use third-party advertising cookies or cross-site tracking cookies that follow your activity across websites unrelated to our platform. Any third-party scripts integrated into hdaji (such as those from our game providers including Evolution Gaming, Pragmatic Play, and Spribe) are subject to those providers' own cookie and privacy policies. These providers are contractually required to handle data in a manner consistent with this Privacy Policy.

Section 4

Data Sharing & Third Parties

hdaji does not sell your personal data to any third party, and we do not share your data for the purpose of enabling third-party advertising directed at you. We share your data only with trusted partners who provide services directly supporting the operation of the hdaji platform, and only to the extent strictly necessary for those services to function.

The categories of third parties with whom your data may be shared are as follows:

• Payment Processors: bKash, Nagad, Rocket, and Upay receive the minimum necessary financial and identity data to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations. hdaji is not responsible for how these providers process data within their own systems, but we require them to maintain data security standards consistent with this Policy.
• Game Content Providers: Third-party game studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive session identifiers and wager data necessary to operate their games within the hdaji platform. These providers do not receive your full identity data unless required by their own regulatory obligations.
• Identity Verification Services: hdaji may use third-party KYC and identity verification providers to authenticate your identity documents and confirm your date of birth. These providers receive only the data necessary for the specific verification task and are contractually prohibited from using it for any other purpose.
• Fraud Prevention & Security Providers: Specialist fraud detection services may process technical and behavioural data (such as IP addresses, device fingerprints, and transaction patterns) on hdaji's behalf to protect the platform and its players from fraudulent activity.
• Legal & Regulatory Authorities: hdaji may be required by applicable law to disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities. Any such disclosure will be made strictly in accordance with legal requirements and limited to the data specifically requested.
• Professional Advisors: hdaji's legal advisors, auditors, and accountants may access limited personal data as part of the professional services they provide to hdaji, subject to professional confidentiality obligations.

Section 5

Data Retention & Storage

hdaji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The specific retention periods that apply to the main categories of personal data we hold are outlined below.

When your personal data is no longer required for any of the purposes set out above, hdaji will securely delete or anonymise it. Where anonymisation is used, the resulting data (which can no longer identify you) may be retained indefinitely for aggregate statistical analysis and platform improvement purposes.

All personal data held by hdaji is stored on secure servers. hdaji applies appropriate technical and organisational measures to protect stored data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Access to personal data is restricted to hdaji staff and authorised service providers on a strict need-to-know basis.

Section 6

Your Privacy Rights

As a player on hdaji, you hold a number of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact the hdaji data team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 48 hours and respond in full within 30 calendar days.

Please note that some of these rights are not absolute. In certain circumstances, hdaji may be entitled to refuse a request — for example, where complying would require us to breach a legal obligation, or where the request is manifestly unfounded or excessive. Where a request is refused, we will explain the reason in writing.

If you are not satisfied with how hdaji has handled a privacy rights request or a complaint about how we process your data, you have the right to escalate the matter. Please contact us in the first instance at [email protected]; we are committed to resolving all privacy concerns promptly and fairly.

Section 7

Data Security Measures

The security of your personal and financial data is of paramount importance to hdaji. We implement a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, loss, misuse, alteration, or disclosure. These measures are reviewed and updated regularly to keep pace with evolving security threats.

In the event of a data breach that is likely to result in a risk to your rights or interests, hdaji will notify affected players without undue delay — and no later than 72 hours after becoming aware of the breach — via the email address registered to their account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures hdaji has taken or proposes to take to address the breach.

Section 8

Policy Updates & Contact

hdaji reserves the right to update this Privacy Policy at any time. When we make material changes — such as introducing a new category of data collection, adding a new category of third-party recipient, or changing the legal basis for processing — we will notify registered players via email at least 14 calendar days before the changes take effect. For non-material corrections (such as typographical fixes or clarifications that do not alter the substance of the Policy), the updated Policy will be published on this page without prior notice.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how hdaji is protecting your data. Your continued use of the hdaji platform following the effective date of any update constitutes your acceptance of the revised Policy.

If you have a complaint about how hdaji has handled your personal data that we have not resolved to your satisfaction through the process described above, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. hdaji will cooperate fully with any such authority in the investigation of complaints relating to data protection.

This Privacy Policy was drafted and is maintained in the English language. In the event of any conflict or inconsistency between this English version and any translation, the English version shall prevail.