Privacy Policy —
heybajji
At heybajji, your privacy is a fundamental commitment, not an afterthought. This Privacy Policy explains in plain English exactly what personal data we collect, why we collect it, how we use and protect it, and the rights you hold over your own information as a player on our Bangladesh platform.
End-to-End Encryption
All data transmitted between your device and heybajji is protected by 256-bit SSL/TLS encryption. Your personal details, payment information, and account activity are never transmitted in plain text across any network connection.
No Data Selling
heybajji does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely to operate and improve the heybajji platform and to comply with legal obligations.
Transparent Cookie Use
heybajji uses cookies and similar tracking technologies only for essential platform operation, session management, fraud prevention, and aggregate analytics. We explain every cookie category in plain English so you can make informed choices.
Limited Data Retention
Personal data is retained only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. Account data is deleted or anonymised within a reasonable period following permanent account closure.
Your Rights Respected
You have the right to access, correct, or request deletion of your personal data held by heybajji. Requests are handled promptly by our support team and, where applicable, our dedicated Data Protection Officer.
KYC & Payment Security
Payment details and KYC documents submitted to heybajji are handled with the highest level of care. Card data is processed via PCI-DSS compliant payment processors. Identity documents are stored in encrypted form and accessed only by authorised verification staff.
1. Information We Collect
heybajji collects personal data in several ways — directly from you when you register or use the platform, automatically as you navigate the site, and in limited circumstances from third-party sources such as payment processors and identity verification providers. The categories of data we collect are set out below.
1.1 Registration Data
When you create a heybajji account, we collect the information you provide during the sign-up process. This typically includes your full name, date of birth, residential address (including city and district within Bangladesh — for example Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or Barisal), email address, mobile phone number, and the username and password you choose. This information is necessary to create and administer your account and to verify that you meet the minimum age requirement of 18 years.
1.2 Identity Verification (KYC) Data
As part of our Know Your Customer process, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driver's licence. We may also request a recent utility bill or bank statement as proof of address, and photographic evidence of ownership of the payment method you use for deposits and withdrawals. These documents are collected solely for the purpose of verifying your identity, confirming your age, and complying with our anti-money laundering obligations.
1.3 Financial and Transaction Data
When you make deposits or request withdrawals via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we collect and retain records of those transactions including the payment method reference, transaction amount in Bangladeshi Taka (৳), date and time of the transaction, and the outcome. We do not store full card numbers or mobile banking PINs — these are handled by our PCI-DSS compliant payment processing partners.
1.4 Gaming and Betting Activity Data
heybajji maintains detailed records of all gaming and betting activity on your account. This includes the games you play (slots, live casino, cricket betting, virtual sports, and others), the amounts wagered, the outcomes of each session, bonus usage, and responsible gaming tool settings such as deposit limits and self-exclusion periods. This data is used to administer your account, detect problem gambling patterns, and ensure the integrity of the platform.
1.5 Technical and Device Data
When you access heybajji, our systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time spent on each page, and session timestamps. This information is used for fraud prevention, security monitoring, platform performance optimisation, and aggregate analytics. We do not use this data to build individual advertising profiles.
1.6 Communications Data
If you contact heybajji support via live chat, email, or any other channel, we retain records of those communications. This includes the content of your messages, the date and time of contact, and the resolution reached. This data is used to handle your enquiry, improve our support service quality, and maintain a record in the event of any dispute.
Voluntary Disclosure: Please do not share sensitive personal information — such as financial PINs, passwords, or medical history — with heybajji through any unencrypted channel such as public social media. The heybajji support team will never ask for your account password via any channel.
2. How We Use Your Data
heybajji uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or as otherwise permitted by law.
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation and management | Registration data, contact details | Contract performance |
| Age and identity verification (KYC) | KYC documents, date of birth | Legal obligation |
| Processing deposits and withdrawals | Financial and transaction data | Contract performance |
| Fraud prevention and security | Technical data, transaction data | Legitimate interest |
| Responsible gaming monitoring | Gaming activity, account settings | Legal obligation / Legitimate interest |
| Customer support | Communications data, account data | Contract performance |
| Platform analytics and improvement | Technical data (aggregated) | Legitimate interest |
| Promotional communications (opted-in) | Email address, name, preferences | Consent |
| Anti-money laundering compliance | KYC data, transaction records | Legal obligation |
heybajji does not use automated decision-making processes — including profiling — that produce legal or similarly significant effects on you without human oversight. Where automated tools are used to flag accounts for security or responsible gaming review, a member of our team will carry out a manual review before any substantive action is taken on your account.
Marketing Communications: heybajji will only send you promotional emails, SMS messages, or push notifications if you have explicitly opted in to receive them. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting the support team or adjusting your account notification preferences.
3. Legal Basis for Processing
heybajji processes your personal data on one or more of the following lawful bases, depending on the specific purpose for which the data is used:
- Contract Performance: Processing that is necessary to fulfil our obligations to you under the heybajji Terms & Conditions — for example, creating your account, processing your deposits and withdrawals, and providing access to games and betting markets.
- Legal Obligation: Processing that is required to comply with applicable laws and regulations — for example, conducting KYC checks, retaining transaction records for anti-money laundering purposes, and enforcing age restrictions.
- Legitimate Interests: Processing carried out for purposes that are genuinely necessary for the safe and effective operation of the heybajji platform — for example, fraud detection, security monitoring, and aggregate platform analytics — where those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for which we have obtained your freely given, specific, and informed consent — for example, sending you personalised promotional offers and marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
4. Data Sharing & Third Parties
heybajji does not sell or rent your personal data to any third party. We share personal data with external parties only where it is strictly necessary for the operation of the platform, for compliance with legal obligations, or where you have given explicit consent. The categories of third parties with whom we may share your data are described below.
4.1 Payment Service Providers
To process your deposits and withdrawals, heybajji shares necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, and card processing networks operating on behalf of Visa and Mastercard. These providers are contractually required to handle your data securely and to use it solely for the purpose of processing your transactions.
4.2 Identity Verification Providers
heybajji uses third-party identity verification services to conduct KYC checks. Your identity documents and biometric data (where applicable) are shared with these providers solely for verification purposes. All such providers are required to comply with applicable data protection standards and to delete verification data within defined retention periods.
4.3 Game Software Providers
The casino games available on heybajji are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your account identifier and gameplay data in order to deliver game sessions and to maintain the integrity of their certified RNG systems. They do not receive your full name, contact details, or payment information.
4.4 Legal and Regulatory Authorities
heybajji may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required by applicable law or by a valid legal order. We will notify you of any such disclosure where we are legally permitted to do so.
4.5 Business Transfers
In the event that heybajji undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that may result from it.
No Cross-Border Transfers Without Safeguards: Where personal data is transferred to a third-party processor located outside your country of residence, heybajji ensures that appropriate safeguards are in place — such as contractual data protection clauses — to protect your data to a standard at least equivalent to that provided by this Privacy Policy.
6. Data Retention
heybajji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The table below summarises our standard data retention periods by data category.
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal / AML compliance |
| KYC and identity documents | Duration of account + 5 years post-closure | Legal obligation |
| Financial transaction records | 7 years from transaction date | Financial regulations |
| Gaming and betting activity logs | Duration of account + 3 years post-closure | Dispute resolution / Legal |
| Customer support communications | 3 years from last interaction | Dispute resolution |
| Technical / device logs | 13 months from collection | Security / fraud prevention |
| Marketing preferences (consented) | Until consent withdrawn + 1 year | Consent record |
Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be attributed to any individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.
Where you request deletion of your account or erasure of your personal data, heybajji will assess the request in accordance with our legal obligations. Data that must be retained to comply with financial, anti-money laundering, or regulatory requirements will be retained for the minimum period required by law before deletion.
7. Your Privacy Rights
As a heybajji player, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact the heybajji support team or our Data Protection Officer using the details in Section 9 of this Policy.
- Right of Access: You have the right to request a copy of the personal data heybajji holds about you, together with information about how it is used and with whom it is shared. We will respond to access requests within 30 days.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain account details directly within your account settings.
- Right to Erasure: You may request that heybajji delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to our legal obligations to retain certain data.
- Right to Restriction: You may request that heybajji restrict the processing of your data in certain circumstances — for example, while a complaint or accuracy dispute is being resolved.
- Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing of your personal data where it is based on heybajji's legitimate interests, including profiling. You may also object at any time to the use of your data for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
How to Submit a Request: Privacy rights requests may be submitted by contacting the heybajji support team via live chat or by email to support@heybajji. We will verify your identity before processing any request and will respond within 30 days. Complex requests may require up to an additional 60 days, and you will be informed of any extension within the initial 30-day period.
8. Data Security Measures
heybajji takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information from unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:
- 256-bit SSL/TLS Encryption: All data in transit between your device and the heybajji platform is encrypted using industry-standard SSL/TLS protocols. This ensures that your login credentials, personal details, and financial information cannot be intercepted by third parties during transmission.
- Encrypted Data Storage: Sensitive personal data stored on heybajji servers — including KYC documents, account credentials, and payment references — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data held by heybajji is restricted on a strict need-to-know basis. Only employees and contractors with a legitimate operational need are granted access to personal data, and all such access is logged and audited.
- Fraud Detection Systems: heybajji operates automated fraud detection and security monitoring systems that analyse account activity for unusual patterns that may indicate unauthorised access, account takeover, or financial fraud. Suspicious activity triggers an immediate security review.
- Regular Security Assessments: heybajji conducts regular internal security assessments and works with third-party security specialists to identify and remediate potential vulnerabilities in its platform and data infrastructure.
- Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, heybajji will notify you and any relevant regulatory authorities without undue delay in accordance with applicable legal requirements.
While heybajji takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying heybajji immediately if you believe your account has been compromised.
9. Contact & Data Protection Officer
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which heybajji handles your personal data, you are encouraged to contact us in the first instance using the details below. We are committed to resolving all privacy-related enquiries promptly and fairly.
General Support
The heybajji support team is available 24 hours a day, 7 days a week via live chat on the platform. For written privacy-related enquiries, please contact: support@heybajji
Data Protection Officer
For formal data subject rights requests — including subject access requests, erasure requests, or objections to processing — please address your correspondence specifically to the Data Protection Officer at: support@heybajji with the subject line "Data Protection Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 days.
Amendments to This Privacy Policy
heybajji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. Material changes will be communicated to you via email to your registered address and/or via a prominent notice on the heybajji website. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of heybajji following publication of any updated Privacy Policy constitutes your acceptance of the revised terms.
Policy Language: This Privacy Policy is written in English. English is the governing version of this document. Any translated version provided for convenience is for reference only and does not constitute a binding legal document. In the event of any conflict between a translation and the English version, the English version shall prevail.
Your Privacy Is Protected at heybajji
With your data secure and your rights clearly defined, you can enjoy cricket betting, slots, and live casino games with complete peace of mind. Explore everything heybajji has to offer — for adults aged 18 and above only.
🔞 18+ Only — Please Gamble Responsibly