Privacy & Data

heybaji Privacy Policy

At heybaji, your personal data belongs to you. This Privacy Policy explains exactly what information heybaji collects, why we collect it, how we use it and what rights you have over your own data. We keep it plain and honest — no legal jargon for the sake of it.

Last updated: 1 January 2025
Our Commitment

How heybaji Protects Your Privacy

Six core principles that guide how heybaji handles every piece of data you share with us.

Data Is Encrypted

All personal data stored by heybaji is encrypted at rest and in transit using industry-standard SSL/TLS protocols. Your information is never stored in plain text on heybaji's servers.

Never Sold to Third Parties

heybaji does not sell, rent or trade your personal data to advertisers, data brokers or any other third party for commercial purposes. Your data is used only to operate and improve the heybaji platform.

You Control Your Data

heybaji gives you the right to access, correct and delete your personal data at any time. Submit a request via email and heybaji will respond within 30 days — usually much faster.

Minimal Data Collection

heybaji only collects the data that is genuinely necessary to operate the platform, process payments and comply with legal obligations. We do not collect data speculatively or unnecessarily.

No Unnecessary Tracking

heybaji does not use invasive third-party tracking pixels or cross-site advertising trackers. Session analytics are used only to improve platform performance and user experience.

Transparent & Honest

This Privacy Policy is written in plain English so every heybaji player in Bangladesh can understand it. If anything is unclear, contact our support team and we'll explain it directly.

01 Who We Are

heybaji is an online gaming and sports betting platform operating at heybaji.today. When this Privacy Policy refers to "heybaji", "we", "us" or "our", it means the heybaji platform and the team responsible for operating it.

heybaji acts as the data controller for all personal information collected through the heybaji website and mobile app. This means heybaji determines the purposes and means of processing your personal data, and is responsible for keeping it safe.

If you have any questions about how heybaji handles your personal data, you can reach our privacy team at any time via the contact details in Section 12 of this policy. We take every privacy enquiry seriously and will respond promptly.

heybaji is committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles. This policy is reviewed and updated regularly to reflect any changes in how we operate.

02 Data We Collect

heybaji collects personal data in two ways: information you provide directly when using the platform, and information collected automatically as you interact with heybaji's services. Here is a clear breakdown of what heybaji collects and why.

Data Type Examples Why Collected
Identity Data Full name, date of birth, gender Account registration and age verification
Contact Data Email address, phone number Account communication and support
Financial Data bKash/Nagad number, transaction history Processing deposits and withdrawals
Verification Data National ID, passport, utility bill KYC compliance and fraud prevention
Technical Data IP address, device type, browser Security monitoring and platform optimisation
Usage Data Games played, bets placed, session duration Responsible gaming monitoring and personalisation
Communications Data Support chat logs, emails sent to heybaji Resolving queries and improving support quality

heybaji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or biometric data unless specifically required by law and with your explicit consent.

03 How We Use Your Data

heybaji uses your personal data only for legitimate, clearly defined purposes. We do not use your data in ways that would surprise you or that go beyond what is reasonably expected when you sign up to an online gaming platform.

  • To create and manage your heybaji player account.
  • To verify your identity and age in compliance with our legal obligations.
  • To process deposits, withdrawals and bonus transactions securely.
  • To detect and prevent fraud, money laundering and other illegal activity.
  • To monitor gaming patterns and support responsible gaming obligations.
  • To send you account-related notifications such as deposit confirmations and withdrawal updates.
  • To respond to your support queries and resolve complaints.
  • To improve the heybaji platform based on how players use it.
  • To send you promotional communications about heybaji offers — only if you have opted in to receive them.
  • To comply with applicable laws and regulatory requirements.

heybaji will never use your personal data to make automated decisions that have a significant legal or similarly significant effect on you without giving you the opportunity to request human review.

04 Legal Basis for Processing

heybaji processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

  • Contract performance: Processing necessary to provide the heybaji service you have signed up for, including account management and payment processing.
  • Legal obligation: Processing required to comply with anti-money laundering laws, age verification requirements and other applicable regulations.
  • Legitimate interests: Processing necessary for heybaji's legitimate business interests, such as fraud prevention, platform security and service improvement — provided these interests are not overridden by your rights.
  • Consent: Processing based on your explicit consent, such as receiving heybaji promotional emails. You can withdraw consent at any time.

If you would like to know the specific legal basis for any particular processing activity carried out by heybaji, contact our privacy team using the details in Section 12.

05 Data Sharing

heybaji does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually required to handle it securely and in accordance with applicable data protection standards.

  • Payment processors: bKash, Nagad and Rocket receive the minimum data necessary to process your transactions. They operate under their own privacy policies and security standards.
  • Identity verification providers: Third-party KYC services may receive copies of your identity documents to complete verification checks required by law.
  • IT and hosting providers: heybaji's platform infrastructure providers may process your data as part of hosting and maintaining the platform. They act only on heybaji's instructions.
  • Regulatory and law enforcement authorities: heybaji may be legally required to disclose your data to government bodies, regulators or law enforcement agencies upon receipt of a lawful request.
  • Fraud prevention agencies: heybaji may share data with fraud prevention services to protect the platform and its players from financial crime.

heybaji never shares your personal data with advertisers, social media platforms or data brokers. Your data is not used for any form of third-party targeted advertising.

06 Cookies

heybaji uses cookies and similar tracking technologies to keep the platform running smoothly and to understand how players use it. A cookie is a small text file stored on your device when you visit heybaji.today.

  • Essential cookies: Required for the heybaji platform to function. These include session cookies that keep you logged in and security cookies that protect your account. You cannot opt out of these.
  • Analytics cookies: Help heybaji understand which pages and games are most popular, how long players spend on the platform and where technical issues occur. This data is aggregated and anonymised.
  • Preference cookies: Remember your settings and preferences, such as your preferred language or display options, so you don't have to set them every time you visit heybaji.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using heybaji, but some features may work less smoothly. heybaji does not use third-party advertising cookies.

07 Data Retention

heybaji retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The table below gives a general guide to heybaji's data retention periods.

Data Category Retention Period Reason
Account & identity data 5 years after account closure Legal and regulatory compliance
Financial transaction records 7 years after transaction date Anti-money laundering obligations
KYC verification documents 5 years after account closure Regulatory requirement
Support communications 3 years after resolution Quality assurance and dispute resolution
Technical and usage logs 12 months Security monitoring and platform improvement
Marketing preferences Until consent is withdrawn Consent-based processing

When data is no longer required, heybaji securely deletes or anonymises it so it can no longer be linked back to you as an individual.

08 Your Rights

As a heybaji player, you have the following rights over your personal data. heybaji will respond to all valid requests within 30 days. There is no charge for exercising these rights in most circumstances.

Right of Access

Request a copy of all personal data heybaji holds about you.

Right to Rectification

Ask heybaji to correct any inaccurate or incomplete data.

Right to Erasure

Request deletion of your data where there is no legal reason to keep it.

Right to Restriction

Ask heybaji to limit how your data is used while a dispute is resolved.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to heybaji processing your data for direct marketing at any time.

To exercise any of these rights, email heybaji at [email protected] with your request. We may need to verify your identity before processing the request to protect your account security.

09 Data Security

heybaji takes the security of your personal data seriously. We have implemented a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction or disclosure.

  • All data transmitted between your device and heybaji's servers is encrypted using TLS 1.2 or higher.
  • Player passwords are stored using strong one-way hashing algorithms — heybaji staff cannot see your password.
  • Access to personal data within heybaji is restricted to staff who genuinely need it to do their jobs.
  • heybaji's systems are monitored continuously for suspicious activity and potential security threats.
  • Regular security assessments and penetration testing are conducted on heybaji's platform infrastructure.
  • All staff with access to personal data receive data protection training.

Despite these measures, no online platform can guarantee 100% security. If you suspect that your heybaji account has been compromised, contact our support team immediately so we can take protective action.

In the unlikely event of a data breach that poses a risk to your rights, heybaji will notify affected players promptly and take all necessary steps to contain and remediate the incident.

10 Children's Privacy

heybaji is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register a heybaji account or attempt to use the platform in any way.

If heybaji discovers that personal data has been collected from a person under 18, we will immediately close the associated account, delete all related data and, where appropriate, report the matter to the relevant authorities. If you believe a minor has registered on heybaji, please contact us immediately at [email protected].

11 Changes to This Policy

heybaji may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law or improvements to our data practices. When material changes are made, heybaji will notify registered players via email and display a prominent notice on the platform.

The updated Privacy Policy will take effect 7 days after notification unless the changes are required immediately by law. The "Last Updated" date at the top of this page will always reflect when the policy was most recently revised. We encourage you to review this page periodically to stay informed about how heybaji protects your privacy.

12 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or how heybaji handles your personal data, please get in touch with our privacy team. We aim to respond to all privacy-related enquiries within 5 business days.

For questions about responsible gaming tools and self-exclusion, please visit our Responsible Gaming page. For the full terms governing your use of heybaji, see our Terms and Conditions.

Your Data Is Safe

Play with Confidence on heybaji

Now you know exactly how heybaji protects your privacy, create your free account and enjoy Bangladesh's best online gaming experience — securely and responsibly.