Your Data — Your Rights

Habet Privacy Policy — Full details on how your personal information is collected, used, and protected

Habet believes your personal data is a valuable asset — and protecting it is our responsibility. This document clearly sets out what information is collected, why it is collected, and how it is kept secure.

Last Updated: January 2026 Version 2.4 Bengali Translation GDPR compliant

This Privacy Policy is issued by Habet (habet.best) A full description of how user personal data is managed on the platform. This document has been written in Bengali so every user in Bangladesh can read and understand it easily. By creating an account or using the platform, you agree to this policy.

In summary: Habet uses your data solely to operate and improve the service. Your personal information is never sold to third parties. You have the right to access, correct, and delete your data.

01

What Information Is Collected

Habet collects several types of information — some you provide directly, and some is gathered automatically as you use the platform. Full details are outlined below:

Identity information
Full name, date of birth, National ID number, passport number (for KYC verification)
Contact Information
Mobile number, email address, current residential address
Financial Information
Payment method details (bKash/Nagad number, last four digits of card), transaction history
Activity data
Betting history, game sessions, win/loss records, deposit and withdrawal timestamps
Device information
IP address, browser type, operating system, device identifier (not IMEI)
Location data
Approximate geographic location (IP-based) — precise GPS location is not collected
Communication Logs
Support chat transcripts and email exchange records — retained for service quality improvement
Verification Documents
Photos or scanned copies of identity documents submitted during the KYC process — stored on encrypted servers
02

How information is collected

During the registration process

The information you provide when opening an account — your name, email address, mobile number, and date of birth — is collected directly. This information is essential for managing your account.

While using the platform

When you use Habet, certain technical information is automatically collected — such as which pages you visited, how long you stayed, and what device you used to log in.

During payment transactions

Financial information is received through payment processors during deposits or withdrawals. Full card numbers are never stored in Habet's systems.

Through customer support

When you contact us via live chat or email, those conversations are recorded. This is used to monitor and improve the quality of our support.

Via Cookies

The Habet website uses cookies — they help improve your browsing experience and remember your login details. Full details of our cookie policy are provided in Section 5.

03

Purpose of data use

Habet uses your data only for specific and legitimate purposes. Each purpose is clearly outlined below:

  • Account Management: To create, verify, and manage your account. To ensure login security and detect unauthorized access.
  • Payment processing: To process deposits, handle withdrawals, and maintain transaction records.
  • KYC & Age Verification: To verify user identity and age — this is a legal requirement.
  • Fraud Prevention: To detect suspicious transactions and ensure compliance with Anti-Money Laundering (AML) policies.
  • Customer Support: To resolve your questions and complaints and to improve the quality of our service.
  • Personalised Experience: To analyse your preferences and behaviour in order to show you relevant offers and content.
  • Responsible Betting: To identify patterns of excessive betting and provide assistance where needed.
  • Legal & Regulatory Compliance: To meet the requirements of licensing authorities and applicable legal obligations.

Habet never sells your data to advertisers, and does not share it with third parties except as anonymized analytics that cannot identify you personally.

04

Data Sharing Policy

Habet may share data with third parties in limited circumstances and to a limited extent. The reasons and conditions for each case are outlined below:

Payment Processors

Payment details are shared with bKash, Nagad, Rocket, or your bank solely for transaction verification. Each of these providers has its own privacy policy and complies with PCI-DSS standards.

Regulatory & Law Enforcement

Information is disclosed only when legally required — such as by a court order, government investigation, or a request from a licensing authority.

Identity Verification Services

Approved third-party services are used for identity verification during the KYC process. These providers are bound by strict confidentiality agreements.

Game providers

When playing Live Casino or third-party games, session data may be shared with the relevant provider solely for the purpose of operating the game.

Analytics Services

Anonymous data is used for platform performance analysis — no personal identity is revealed. Only aggregated behavioral statistics are analyzed.

Before sharing any data with third parties, Habet ensures they maintain adequate security measures and will use the information only for the specified purpose — nothing beyond that.

05

Cookies & Tracking Technologies

The Habet website and app use cookies and similar technologies. Cookies are small text files stored in your browser. The table below outlines the types of cookies used on Habet and their purposes:

Cookie Type Purpose Duration Can it be disabled?
Essential Cookies Maintaining login sessions, security tokens Upon session end No — required for the service
Functional Cookies Remembering language preferences and odds format settings 1 Year Yes
Analytics cookies User behavior analysis, page performance 6 months Yes
Security Cookies Fraud and bot detection 30 days No — required for security

Cookies can be managed through your browser settings. However, disabling essential and security cookies may prevent Habet from functioning properly. To manage cookies, go to the "Privacy" section in your account settings.

06

Data Retention Period

Habet does not retain data for longer than necessary. However, certain information must be kept for a defined period due to legal obligations:

  • Account information: For the full duration the account is active, and for 5 years after closure (for legal compliance purposes).
  • Financial transactions: 7 Years — mandatory under financial regulatory law.
  • KYC Documents: Five years after account closure.
  • Support Chat Logs: 2 years — for service quality analysis and dispute resolution.
  • Betting and gaming history: 7 years — required for regulatory audit purposes.
  • Marketing Preferences: Deleted immediately upon opt-out.
  • Analytics data (anonymous): Indefinitely — as it contains no personally identifiable information.

Once the retention period expires, data is securely deleted or anonymised so it can no longer be linked to any individual.

07

Your Rights

Every Habet user has certain fundamental rights regarding their personal data. Here is how you can exercise each of them:

Right to access
You may request to see the data Habet holds about you. A report is typically sent within 30 days.
Right to rectification
You may request corrections to any inaccurate information. This can be done through your account settings or by contacting our support team.
Right to erasure
After account closure, you may request deletion of your personal data — once the legally required retention period has expired.
Right to Object
You may object to your data being used for marketing or profiling purposes, and your request will take effect immediately.
Right to Data Portability
You may request a downloadable copy of your data in a readable format (CSV or JSON) through our support team.
Right to Restrict Processing
In certain circumstances, you can request that processing of your data be restricted — for example, while the accuracy of your data is being verified.

To exercise these rights support@habet.best— email us or reach out via live chat. Habet typically responds within 30 days.

08

Security Measures

Habet follows the highest industry security standards to protect your information. Our key security measures are described below:

SSL/TLS transport encryption 256-bit
Database Encryption Layer AES-256
Users with Two-Factor Authentication (2FA) Enabled 78%
Cybersecurity Audit (Annual) Completed
Payment PCI-DSS compliance Level 1
  • All data transfers are encrypted via HTTPS.
  • Sensitive data (ID document images, financial information) is stored on separate encrypted servers.
  • Each employee's access to data is limited to what is necessary for their role.
  • Regular security audits and penetration testing are conducted.
  • In the event of a data breach, affected users will be notified within 72 hours.
09

Child Protection

Habet's services are strictly for individuals aged 18 and above. We do not knowingly collect any information from anyone under the age of 18.

If a parent or guardian discovers that their child has opened an account on Habet, please contact the support team immediately — the account will be closed and all collected data will be deleted.

Habet's age verification process begins at registration and is finalized through KYC using a National ID. If an underage account is detected, it is closed immediately.

10

Policy Updates & Contact

Habet updates this Privacy Policy as needed. If changes are made, you will be notified via your registered email or through a platform notification. For significant changes, at least 30 days' notice will be given before they take effect.

For any privacy-related requests or complaints:

  • Email: support@habet.best
  • Use the subject line: "Privacy Request"
  • Live chat: 8:00 AM – 12:00 AM (Bangla support)

Habet aims to respond to all privacy-related requests within 30 days. For complex requests, an additional 60 days may be required — you will be notified in advance if this is the case.

Habet's Commitment to Privacy

The core principles we follow to keep your data safe

Never sold
Habet does not sell your personal data to any advertisers, data brokers, or third parties — this is the strictest commitment in our core policy.
Encrypted storage
All your sensitive data is stored on servers secured with AES-256 encryption. No employee can access this data without authorisation.
Your controls
You have the right to view, correct, or request deletion of your personal data. Habet respects these rights and aims to respond within the designated timeframe.
Data Minimisation
Only the data necessary to operate the service is collected. Collecting information beyond what is needed goes against Habet's policy.
Fixed Term
A clear retention period is defined for each category of data. Once that period expires, the data is securely deleted or anonymised.
Transparent Notification
Users are notified promptly of any policy changes or significant data-related incidents — nothing is kept hidden.

Why Privacy Matters — Habet's Approach

Digital services are expanding rapidly across Bangladesh. From mobile banking to online betting, people are now managing money on their phones every day. In this landscape, the security of personal data has become a critical concern — and it is something Habet has taken seriously from day one.

Data Protection in the Bangladesh Context

Discussions around digital security law and personal data protection are growing in Bangladesh. With its users in mind, Habet follows international privacy standards — in particular, the principles of the European GDPR. This is not merely a matter of legal compliance; Habet genuinely believes that a user's data belongs to them.

Many users ask: "Does Habet store my bKash number or bank details?" The short answer is partially yes — your number is retained for transaction records, but your full PIN or password is never stored. Payment information is always encrypted and used solely for transaction verification.

Marketing Communications & Opt-Out

Habet sends registered members relevant offers and bonus updates via SMS or email. You can opt out at any time. Go to "Notification Preferences" in your account settings to turn off marketing communications. You can also unsubscribe in one click using the "Unsubscribe" link at the bottom of any email.

However, essential service communications — such as payment confirmations, security alerts, and account-related updates — are not marketing messages. These cannot be opted out of, as they are necessary for the operation of the service.

Details on third-party integrations

Habet integrates certain third-party games and services — such as Live Casino offerings from Pragmatic Play or Evolution Gaming. When you play these games, session data is shared with the respective provider — covering game results and bet details only, not your personal identity. All such providers are bound by strict confidentiality agreements with Habet.

Habet's website has no third-party social media buttons or external ad network trackers — the kind commonly found on other sites that collect user data in the background.

What Habet Does in the Event of a Data Breach

While Habet maintains the highest security standards, eliminating all cybersecurity risk entirely is not possible. In the event of a data breach, Habet will take the following steps:

  • Isolating the affected systems as soon as the incident is identified.
  • Affected users will be notified by email within 72 hours.
  • A clear description of what data was affected and what risks it may pose.
  • Advising on immediate steps to minimise harm.
  • Regulatory authorities will be notified within the required timeframe.

Habet wants users to feel confident using the platform. Maintaining that trust starts with transparency, and this Privacy Policy is a part of that commitment. For any further questions, please don't hesitate to reach out to the support team at any time.

Enjoy Habet with your personal information kept safe

Once you have read the Privacy Policy, open your account with confidence — Habet is a responsible custodian of your data.

FAQs

Common Questions About Registration & Deposits

Registration on Habet is a two-step process. The first step — creating your account — requires only three pieces of information: an active mobile number, an email address, and a password. That's all it takes to get your account set up and start exploring the platform. The second step is KYC verification, which must be completed before your first withdrawal. KYC requires: your full name (as it appears on your National ID), date of birth, National ID number, and clear photos of the front and back of your ID. In some cases, proof of current address (such as a utility bill) may also be requested. KYC verification is typically completed within 24 hours. All documents are stored securely on encrypted servers and used solely for identity verification purposes. For more information, please visit our Terms & Conditions View.

The minimum deposit at Habet via both bKash and Nagad is ৳300. Transfers below this amount will not be accepted by the system. The same applies to Rocket (DBBL) — the minimum is ৳300. The maximum single transfer is ৳50,000 for both bKash and Nagad. After sending funds, your Habet wallet is typically credited within 1 to 3 minutes — often sooner. Habet charges no processing fee on deposits, though your mobile banking app may apply a small transfer charge as per its own policy. Always use your own mobile banking number when making a deposit — payments from someone else's number may complicate verification.

Privacy & Responsible Betting: Beyond protecting your data, Habet wants you to enjoy betting responsibly. Deposit limits and self-exclusion options are available free of charge. To learn more, visit our Responsible Gaming View page. ⚠️ For users aged 18+ only.

বাংলা