hybaji Privacy
Policy

For the purposes of this Privacy Policy, the data controller responsible for the personal information of registered players is the legal entity operating the hybaji platform at hybaji.im (hereinafter referred to as "hybaji", "we", "us", or "our").

hybaji is the operator of the online casino and sportsbook platform accessible at hybaji.im, offering services to players in Pakistan including cricket betting, live casino, slot games, and fishing games. hybaji operates under an international gaming licence and processes player data in accordance with applicable data protection legislation.

hybaji collects personal data from you through a number of channels — primarily during account registration, when you make deposits or withdrawals, when you contact customer support, and through your regular use of the hybaji platform. The categories of data hybaji may collect include:

2.1 Identity Data

• Full legal name as it appears on your CNIC or passport
• Date of birth (for mandatory age verification — hybaji is a 21+ platform)
• Gender (where voluntarily provided during registration)
• CNIC number or passport number where required for KYC verification

2.2 Contact Data

• Valid Pakistani mobile phone number
• Email address
• Residential address (city, province, postal code)

2.3 Financial Data

• JazzCash or EasyPaisa mobile wallet account identifier (account number/MSISDN)
• Bank account details provided for deposit or withdrawal (e.g., HBL, UBL, Meezan Bank, Raast)
• Transaction history including deposit amounts, withdrawal amounts, and dates

2.4 Usage & Technical Data

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser version
• Pages visited within the hybaji platform, time spent, and navigation patterns
• Game history, bet amounts, wagering records, and session logs

2.5 Communications Data

• Records of live chat conversations with hybaji customer support
• Email correspondence sent to or received from hybaji
• Responses to hybaji surveys or feedback requests (where voluntarily submitted)

hybaji uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected without obtaining your further consent.

hybaji does not use automated decision-making or profiling in any manner that produces legal or similarly significant effects on players, except where such processing is required to fulfil a legal obligation such as anti-money laundering screening.

hybaji processes your personal data under one or more of the following legal bases:

• Contractual Necessity: Processing required to operate your hybaji account, handle deposits and withdrawals, and deliver the gaming services you have contracted for.
• Legal Obligation: Processing required to comply with applicable laws including anti-money laundering regulations, age verification obligations, and financial reporting requirements.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and improving the quality of hybaji services — where such interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications, optional personalisation features, and non-essential cookies — where you have given clear, informed, and freely given consent which you may withdraw at any time.

hybaji does not sell your personal data to any third party. hybaji may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast receive transaction details necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and data protection obligations.
• KYC & Identity Verification Providers: Where required, hybaji may use third-party identity verification services to authenticate your CNIC or passport details. These providers are contractually bound to process your data only for the verification purpose.
• Game Software Providers: Game providers such as Pragmatic Play and Evolution Gaming receive anonymised session data necessary to operate game rounds and resolve technical disputes. They do not receive your full identity or financial data.
• Regulatory & Law Enforcement Authorities: hybaji will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required by a valid legal order or where hybaji has a good-faith obligation to do so under applicable law.
• IT & Infrastructure Providers: hybaji uses reputable cloud hosting and cybersecurity service providers who process data on hybaji's behalf under strict data processing agreements. These providers have no independent right to use your data.

hybaji uses cookies and similar tracking technologies to maintain session integrity, prevent fraud, and improve the player experience on the platform. The types of cookies hybaji uses are as follows:

• Strictly Necessary Cookies: Required for the hybaji platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game view preferences, and responsible gaming limit configurations so you do not need to re-enter them on each visit to hybaji.
• Analytical Cookies: Used by hybaji to understand how players navigate the platform, which games are most popular, and where technical issues occur. Data collected is aggregated and anonymised where possible.
• Marketing Cookies: Only placed with your explicit consent during your first visit to hybaji. Used to measure the effectiveness of hybaji's promotional campaigns. You may opt out at any time via your account settings.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies may prevent you from logging into your hybaji account or completing transactions.

hybaji retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods hybaji applies are:

• Active Account Data: Retained for the duration of your hybaji account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC Documentation: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained for the duration of your consent plus two (2) years to demonstrate compliance.
• Technical & Log Data: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes.

When the applicable retention period expires, hybaji will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

hybaji implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and hybaji servers.
• Encryption of sensitive data fields (including financial data and identity document references) at rest in hybaji's database infrastructure.
• Role-based access controls ensuring that hybaji staff can only access player data to the minimum extent required to perform their specific job function.
• Regular security audits and penetration testing of the hybaji platform conducted by independent cybersecurity specialists.
• Two-factor authentication options available to all hybaji players to protect account access.
• Real-time fraud detection systems that monitor for unusual account activity and flag suspicious transactions for manual review.

While hybaji takes every reasonable precaution to secure your data, no digital platform can guarantee absolute security. In the unlikely event of a data breach that poses a high risk to your rights, hybaji will notify affected players without undue delay in accordance with applicable notification obligations.

As a hybaji player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact hybaji at [email protected] with your request. hybaji will respond within 30 days.

• Right of Access: You may request a copy of all personal data hybaji holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data held by hybaji is inaccurate or incomplete, you have the right to request that it be corrected promptly.
• Right to Erasure: You may request that hybaji delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to hybaji's legal retention obligations.
• Right to Restrict Processing: You may ask hybaji to temporarily suspend processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that hybaji provide your data in a structured, machine-readable format.
• Right to Object: You may object to hybaji processing your data on the basis of legitimate interests, including for direct marketing purposes. hybaji will cease such processing unless it has compelling legitimate grounds to continue.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

hybaji is strictly a 21+ platform. hybaji does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the hybaji account registration process, and hybaji reserves the right to request documentary proof of age at any point.

If hybaji discovers that personal data has been collected from an individual who does not meet the minimum age requirement, hybaji will immediately suspend the account, void any associated balances, and securely delete all personal data associated with the underage registration.

The hybaji platform may contain references to third-party services including payment providers such as JazzCash and EasyPaisa, and game software providers. These third parties operate independently and have their own privacy policies which govern how they handle your data when you interact directly with their services.

hybaji is not responsible for the privacy practices of any third-party service provider. hybaji encourages you to review the privacy policies of JazzCash, EasyPaisa, and any other third-party service you use in connection with your hybaji account before providing them with your personal data.

Where hybaji transfers your data to third-party processors, we do so only under contractual obligations that require them to apply data protection standards at least equivalent to those described in this Privacy Policy.

hybaji reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or hybaji's data processing practices. Where changes are material, hybaji will notify registered players via email to the address on their hybaji account and by posting a prominent notice on the hybaji platform at least 14 days before the changes take effect.

The date at the top of this page reflects when the Privacy Policy was last reviewed and updated. Continued use of the hybaji platform following the effective date of any revision constitutes your acknowledgement of the updated Privacy Policy.

The current version of this Privacy Policy is always available at hybaji.im/privacy-policy and supersedes all previous versions.

If you have any questions, concerns, or requests relating to this Privacy Policy or hybaji's handling of your personal data, please reach out to the hybaji Data Protection team using the details below. All enquiries are treated confidentially and responded to within 30 days.

This Privacy Policy was last reviewed on 1 January 2026 and is effective immediately for all new and existing hybaji players in Pakistan.