Your Privacy at 19hbajee

2.1 Account Management. We use your registration data to create, maintain, and manage your 19hbajee player account, including enabling you to log in, update your profile, and access all platform features available to verified players.

2.2 Age and Identity Verification. We process your KYC documents to confirm that you are at least 18 years of age and that the identity associated with your account is genuine. This processing is a mandatory legal and operational requirement that cannot be waived.

2.3 Payment Processing. We use your financial transaction data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, SureCash, and participating Bangladeshi banks. Transaction records are also retained to investigate any disputes or discrepancies in your account balance.

2.4 Platform Security and Fraud Prevention. Technical and device data, combined with gameplay and transaction patterns, is used by our security systems to detect and prevent unauthorised account access, payment fraud, multi-accounting, bonus abuse, money laundering, and other prohibited activities described in our Terms & Conditions.

2.5 Customer Support. Communications data is used to respond to your support queries, investigate complaints, and resolve disputes. Support records are retained for a period consistent with our operational and legal requirements.

2.6 Responsible Gaming Monitoring. Gameplay and session data is monitored to identify behavioural indicators of problem gambling, such as rapidly increasing bet sizes, extended uninterrupted sessions, or unusual deposit patterns. Where such indicators are detected, our responsible gaming team may reach out proactively to offer support. See our Responsible Gaming page for further detail.

2.7 Legal and Regulatory Compliance. We process and retain certain data categories to comply with applicable anti-money laundering (AML) obligations, age verification requirements, and any lawful requests received from competent governmental or regulatory authorities. We do not voluntarily disclose your data to third parties outside this context.

2.8 Service Improvement and Analytics. Aggregated and anonymised usage data is used to analyse platform performance, identify popular games and features, and plan product improvements. This analytics processing does not involve data that identifies you personally.

4.1 Payment Service Providers. To process your deposits and withdrawals, we share the minimum necessary transaction data with your selected payment provider — bKash, Nagad, Rocket, Upay, SureCash, or your designated Bangladeshi bank. These providers act as independent data controllers for their portion of the transaction and are governed by their own privacy policies. 19hbajee is not responsible for the data practices of third-party payment providers once a transaction has been initiated.

4.2 Game Providers. Games on 19hbajee are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games to your device, a technical connection is established between your browser and the relevant provider's infrastructure. Certain technical identifiers (such as a session token) may be shared with the game provider for the duration of your game session. Game providers do not receive your name, payment details, or contact information from 19hbajee.

4.3 Identity Verification Partners. Where automated KYC verification is used, your submitted identification documents may be processed by a third-party identity verification service acting as a data processor on our behalf. Such processors are bound by strict contractual data processing agreements and are not permitted to use your data for any purpose other than the verification service they perform for 19hbajee.

4.4 Law Enforcement and Regulatory Authorities. 19hbajee will disclose personal data to governmental, law enforcement, or regulatory authorities where we are legally obliged to do so, or where we have reasonable grounds to believe that disclosure is necessary to prevent fraud, money laundering, terrorism financing, or other serious criminal activity. Such disclosures are made on a minimum-necessary basis and, where legally permissible, we will inform you of the disclosure.

4.5 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of 19hbajee's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will ensure that appropriate data protection safeguards are in place before any transfer occurs, and we will notify registered players of any material change in data controller identity.

4.6 No Marketing Data Sales. 19hbajee does not sell, rent, or share your personal data with advertising networks, data brokers, or commercial third parties for the purpose of targeted marketing. You will not receive third-party marketing emails as a result of your registration on 19hbajee unless you have separately and explicitly consented to receive them from an identified third party.

6.1 All data transmitted between your device and 19hbajee is encrypted using Transport Layer Security (TLS 1.2 or higher). This encryption ensures that your registration details, payment information, and account credentials cannot be intercepted by third parties during transmission.

6.2 Sensitive data stored on 19hbajee's servers — including account passwords and KYC document copies — is encrypted at rest using industry-standard encryption algorithms. Passwords are stored in hashed form and are never stored or transmitted in plain text. 19hbajee staff do not have access to your password.

6.3 Access to personal data within 19hbajee's internal systems is governed by strict role-based access controls. Only authorised personnel who require access to specific data categories to perform their job functions are granted that access. All internal access is logged and subject to periodic review.

6.4 19hbajee conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities. In the event of a data breach that poses a material risk to the rights and freedoms of affected players, we will notify affected individuals as soon as reasonably practicable and take all necessary steps to contain and remediate the breach.

6.5 Despite the measures described above, no online platform can guarantee absolute security. You play an important role in keeping your account safe by choosing a strong, unique password, enabling SMS two-factor authentication where available, and notifying us immediately at support@19hbajee if you suspect your account has been compromised.

6.6 Personal data is retained only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The specific retention periods applicable to each data category are set out in the table in Section 3. Upon expiry of the applicable retention period, personal data is permanently deleted or irreversibly anonymised.

8.1 Data Controller. The data controller responsible for your personal data is 19hbajee, the operator of the online casino and sports betting platform accessible at 19hbajee. As data controller, 19hbajee determines the purposes and means by which your personal data is processed in connection with your use of the platform.

8.2 Privacy Enquiries. For any questions or concerns about this Privacy Policy — including how your data is collected, used, stored, or shared — please contact our support team directly. We handle all privacy-related communications in English and aim to provide a substantive response within 48 hours for general enquiries and within 30 days for formal rights requests.

8.3 Contact Email. All privacy-related correspondence should be directed to support@19hbajee. Please include "Privacy Enquiry" or the specific request type (e.g., "Data Access Request", "Erasure Request", "Rectification Request") in the subject line of your email to ensure prompt routing to the appropriate team.

8.4 Identity Verification for Rights Requests. To protect your personal data, 19hbajee will verify your identity before actioning any data rights request. You may be asked to confirm your registered email address, mobile number, or provide a copy of a government-issued ID. We will not disclose personal data to any individual who cannot be verified as the account holder.

8.5 Updates to This Policy. This Privacy Policy was last reviewed and updated on 1 January 2026. 19hbajee reserves the right to update this policy at any time. Where changes are material, registered players will be notified by email at least 7 days before the changes take effect. The current version of this policy is always accessible at 19hbajee/privacy-policy. Continued use of the platform following an update constitutes acceptance of the revised policy.