haji Privacy Policy

This Privacy Policy ("Policy") describes how haji ("haji", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at haji.bio, collects, processes, stores, and protects the personal data of users ("Player", "you", "your") who register accounts, access the platform, or otherwise interact with haji's services.

haji is committed to handling your personal data responsibly and transparently. We process personal data only for the specific, legitimate purposes described in this Policy and retain it no longer than necessary to fulfil those purposes or meet applicable legal obligations.

By registering an account on haji or by continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside haji's Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with haji.

haji collects personal data that is necessary to provide our services, comply with legal requirements, and maintain a safe platform. The categories of personal data we may collect include:

haji does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data unless expressly required by applicable law or with your explicit consent.

haji collects personal data through the following channels:

• Direct interactions: Data you provide when registering a haji account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or responding to surveys and promotions.
• Automated technologies: Data collected automatically when you access the haji platform, including cookies, web beacons, server logs, and similar tracking technologies that record your device, browser, and interaction data.
• Third-party providers: Data received from identity verification services, payment processors (such as bKash, Nagad, and Rocket), fraud detection partners, and analytics providers, where such data is necessary to provide or protect our services.
• Public sources: Publicly available information, such as sanctions lists and politically exposed persons (PEP) databases, used for compliance and fraud prevention purposes.

haji uses the personal data we collect for the following specific purposes:

1. Account management: Creating, maintaining, and securing your haji account, including processing the haji Login and verifying your identity.
2. Service delivery: Enabling you to access games, place bets, participate in promotions, and use all platform features available on haji.
3. Payment processing: Processing deposits and withdrawals via your chosen payment method, reconciling transactions, and maintaining accurate financial records.
4. KYC and age verification: Verifying that you meet the minimum age requirement of 18 years and confirming that your identity documents are authentic and match your account details.
5. Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering (AML) laws, counter-terrorism financing (CTF) regulations, and other legal requirements.
6. Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other illegal or prohibited conduct on the haji platform.
7. Responsible gaming: Monitoring gaming patterns to identify players who may be exhibiting signs of problem gambling and delivering responsible gaming tools and interventions where appropriate.
8. Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance through haji's support channels.
9. Marketing communications: Sending you promotional offers, bonus notifications, and updates about new games or features on haji, where you have consented to receive such communications. You may withdraw this consent at any time.
10. Platform analytics: Analysing usage patterns and player behaviour to improve the haji platform, optimise game performance, and develop new features.

haji will not use your personal data for any purpose that is incompatible with those stated above without providing you with prior notice and, where required by law, obtaining your explicit consent.

haji processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to enter into and perform our contract with you, including account creation, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC requirements, AML obligations, and age verification mandates.
• Legitimate interests: Processing conducted for haji's legitimate business interests, including fraud prevention, platform security, and service improvement, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, informed, and specific consent, including marketing communications and certain cookie-based tracking. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

haji does not sell or rent your personal data to third parties. We may share your data only in the following specific and limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard, and other integrated payment partners receive only the transaction data necessary to process your deposit or withdrawal.
• Identity verification providers: Third-party KYC and document verification services that assist haji in confirming player identities and ages in compliance with legal requirements.
• Fraud prevention partners: Specialist service providers who assist haji in detecting and preventing fraudulent activity, multi-accounting, and money laundering.
• Technology and hosting providers: Cloud infrastructure, database, and platform hosting providers bound by strict data processing agreements who support the technical operation of haji's services.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, and courts where haji is required to disclose personal data by applicable law, court order, or regulatory instruction.
• Professional advisors: Lawyers, auditors, and accountants who provide professional services to haji and are bound by professional confidentiality obligations.

haji uses cookies and similar tracking technologies to enhance platform functionality, analyse usage patterns, and deliver a more personalised experience. The types of cookies used on haji include:

• Strictly necessary cookies: Essential for the platform to function correctly, including session management, authentication, and security. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players use haji — such as which pages are visited most frequently and how long sessions last — enabling us to continuously improve the platform experience.
• Functionality cookies: Remember your preferences and settings, such as your chosen language or display preferences, to provide a more consistent experience across sessions.
• Targeting and marketing cookies: Used with your consent to deliver relevant promotional content and track the effectiveness of haji's marketing activities.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the availability or performance of some haji platform features. Strictly necessary cookies cannot be disabled through your browser settings while using the platform.

haji retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to maintain your active haji account, and to comply with our legal obligations. The following general retention principles apply:

• Active accounts: Personal and account data is retained for the full duration of your active account relationship with haji.
• Closed accounts: Following account closure, haji retains identity, financial, and gaming records for a minimum period of five (5) years to comply with AML regulations and potential legal proceedings.
• Marketing data: If you withdraw consent for marketing communications, your preference is recorded immediately and marketing contact ceases. Basic identity data required for suppression purposes is retained to ensure we do not inadvertently contact you again.
• Support records: Customer support correspondence is retained for up to three (3) years following resolution of the relevant enquiry.

Upon expiry of the applicable retention period, haji will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

haji takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and haji's servers is protected using industry-standard encryption protocols, ensuring that your personal and financial data cannot be intercepted during transmission.
• Access controls: Access to personal data within haji's systems is restricted to authorised personnel only, on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Secure password storage: Account passwords are stored using one-way hashing algorithms. haji never stores passwords in plain text and will never ask you for your password via any communication channel.
• Intrusion detection and monitoring: haji's platform is continuously monitored for suspicious activity, attempted breaches, and anomalous login patterns. Automated alerts enable rapid response to potential security incidents.
• Regular security reviews: haji conducts periodic reviews of its data security practices and infrastructure to identify and address potential vulnerabilities proactively.

As a haji player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact haji's support team using the details provided in Section 14 of this Policy.

• Right of access: You have the right to request a copy of the personal data haji holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request that haji corrects any inaccurate or incomplete personal data held about you without undue delay.
• Right to erasure: You have the right to request the deletion of your personal data in certain circumstances, such as where the data is no longer necessary for the purposes for which it was collected. This right is subject to haji's legal retention obligations and cannot override AML or regulatory record-keeping requirements.
• Right to restrict processing: You have the right to request that haji restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data on grounds relating to your particular situation, where processing is based on legitimate interests. You also have an absolute right to object to the use of your personal data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

haji will respond to all valid data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further two months, in which case haji will notify you of the extension and the reasons for it.

haji is strictly an adults-only platform. Our services are not directed at, and are not intended for use by, individuals under the age of 18. haji does not knowingly collect personal data from anyone under the age of 18.

If haji becomes aware that personal data has been collected from a person under the age of 18, that account will be closed immediately, all personal data will be deleted without undue delay, and any deposits made will be refunded to the verified payment method. Parents or guardians who believe a minor may have registered on haji are encouraged to contact our support team immediately at [email protected].

haji employs age verification procedures at account registration and reserves the right to request additional age-verification documentation from any player at any point during the account lifecycle. For adults aged 18 and above, this is a routine compliance measure and does not imply any wrongdoing.

The haji platform may contain references to third-party services, such as payment providers and game content suppliers. While haji carefully selects its partners, this Privacy Policy applies solely to data processed by haji itself and does not extend to the privacy practices of any third-party services you may interact with independently.

haji encourages you to review the privacy policies of any third-party service providers you use in connection with the haji platform, including your mobile financial service provider (bKash, Nagad, Rocket, or Upay), your bank, or any other external service. haji accepts no responsibility for the privacy practices or data handling of third parties.

haji reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. Where changes are material, haji will notify registered players via email to their registered address or through a prominent notice on the platform prior to the changes taking effect.

The version of this Policy currently published on the haji website is the operative version. Your continued use of the haji platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you must cease using the platform and may request account closure by contacting haji support.

We encourage you to review this Privacy Policy periodically. The effective date at the top of this document indicates when the most recent revision was made.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way haji handles your personal data, please contact our dedicated privacy support team using the details below. All correspondence must be submitted in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please use "Privacy Request — [Your Account Username]" to ensure prompt handling
• Live Chat: Available 24 hours a day, 7 days a week via the haji platform
• Response time: haji aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 days

For data erasure requests, subject access requests, or consent withdrawal requests, please clearly state the nature of your request in your initial message and include your registered account username so that we may locate your records efficiently.