Privacy Policy — heybajii

1. Information We Collect

heybajii collects personal information from players in order to provide a safe, compliant, and enjoyable gaming experience. We collect data in three primary ways: information you provide directly, information generated automatically through your use of the platform, and information received from third-party verification services.

Information you provide directly:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and chosen username at the point of account creation.
• Identity verification documents: Copies of your Bangladesh National Identity Card (NID), passport, or birth certificate submitted during the KYC process.
• Payment information: Your registered bKash, Nagad, Rocket, or Upay mobile number, or bank account details used for deposits and withdrawals. Full card numbers for Visa and Mastercard payments are processed by our payment partners and are not stored on heybajii servers.
• Communications: Any messages, queries, or complaints you submit to our customer support team via live chat or email, including the content of those communications.
• Responsible gaming declarations: Self-exclusion requests, deposit limit settings, and any other responsible gaming information you provide voluntarily.

Information collected automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths within the heybajii platform.
• Transaction records: A complete log of all deposits, withdrawals, bets, winnings, bonus credits, and account balance changes associated with your account.
• Geolocation data: General location data derived from your IP address to assist with compliance checks. We do not collect precise GPS location data.
• Cookies and similar technologies: Session identifiers, preference cookies, and analytics data as described in the Cookies section of this policy.

Information from third parties:

• Identity verification results from KYC and anti-fraud service providers.
• Transaction confirmation data from payment processors including bKash, Nagad, and bank partners.
• Risk and fraud scoring information from industry-standard compliance databases.

2. How We Use Your Information

heybajii processes personal data only for lawful, specific, and transparent purposes. The following table summarises the key purposes for which your data is used and the legal basis for each processing activity:

heybajii will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or having a clear legal obligation to do so. Where processing is based on your consent, you may withdraw that consent at any time by contacting our support team.

3. Data Sharing & Third Parties

heybajii does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, we do share certain data with carefully selected third-party service providers where this is necessary to operate the platform, comply with legal obligations, or protect the interests of our players. All third-party partners are contractually required to handle your data in accordance with applicable data protection standards.

Categories of third parties with whom we may share data:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard partner networks receive only the minimum data necessary to process your financial transactions (e.g., your registered mobile number for mobile money transfers).
• Identity verification providers: Third-party KYC service providers receive identity document data solely for the purpose of verifying player identity and age. These providers are bound by strict confidentiality obligations.
• Game providers: Game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming may receive anonymised session data for game performance and fairness auditing purposes. They do not receive personally identifiable information.
• Anti-fraud and compliance services: Industry-standard fraud prevention databases may receive transaction data and device fingerprint information for the purpose of detecting and preventing fraudulent activity.
• Legal and regulatory authorities: heybajii will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by applicable law, a valid legal process, or to protect the safety of players and the public.
• Analytics providers: Anonymised, aggregated usage data may be shared with analytics platforms to help us understand how players interact with our platform and improve the user experience. This data cannot be used to identify individual players.

Where personal data is transferred to third-party processors, heybajii ensures that appropriate data processing agreements are in place and that the receiving party maintains adequate security and confidentiality standards comparable to those applied by heybajii.

4. Cookies & Tracking Technologies

heybajii uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics that help us improve the service. A cookie is a small text file stored on your device by your web browser when you visit our platform.

Types of cookies used by heybajii:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, and security verification. These cookies cannot be disabled without disrupting your ability to use the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and previously entered information — to provide a more personalised experience across sessions.
• Analytics cookies: These cookies collect anonymised data about how visitors interact with heybajii, including which pages are visited most frequently, how long sessions last, and which game categories are most popular. This information is used solely to improve platform performance and content.
• Security cookies: These cookies assist with fraud detection and account protection by helping the platform recognise trusted devices and flag unusual login patterns.

heybajii does not use third-party advertising cookies or permit external advertising networks to place tracking cookies on our platform. Your browsing activity on heybajii is not used to build advertising profiles for external platforms.

Managing your cookie preferences: You can control and delete cookies through your browser settings at any time. Instructions for managing cookies are available in your browser's help documentation. Please note that disabling strictly necessary cookies may prevent you from logging in or accessing certain features of the platform.

5. Data Retention & Storage

heybajii retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Personal information associated with an active heybajii account is retained for the duration of the account's active status plus a minimum period of five years following account closure, in accordance with standard financial record-keeping obligations.
• KYC and identity documents: Identity verification documents are retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later, as required by anti-money laundering (AML) compliance standards.
• Transaction records: All deposit, withdrawal, bet, and bonus records are retained for a minimum of five years for compliance and dispute resolution purposes.
• Customer support communications: Records of support interactions are retained for up to three years from the date of the last communication, unless a longer period is required for the resolution of an open dispute.
• Analytics data: Anonymised analytics data is retained for up to two years and does not contain any personally identifiable information.
• Marketing consent records: Records of your consent to receive marketing communications, or your withdrawal of that consent, are retained for as long as they are relevant to demonstrating compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with our internal data disposal procedures. Players who request deletion of their data before the end of a mandatory retention period will be advised of any legal obligation that prevents immediate deletion, and the data will be restricted from active processing in the interim.

All player data is stored on servers located in secure data centre facilities. heybajii implements physical, administrative, and technical safeguards to prevent unauthorised access to stored data. Where data is transferred outside of its primary storage location for processing purposes, such transfers are conducted under equivalent data protection obligations.

6. Your Rights as a Player

As a player registered with heybajii, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat on the heybajii website. We will acknowledge your request within 48 hours and respond substantively within 30 calendar days.

• Right to access: You have the right to request a copy of the personal data that heybajii holds about you, along with information about how that data is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For core account data, you may be able to update certain information directly through your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention. Please note that we are required by law to retain certain data (such as KYC records and transaction logs) for a minimum period, which may mean we cannot immediately fulfil an erasure request in full.
• Right to restrict processing: In certain circumstances — for example, while the accuracy of your data is being verified — you have the right to request that we restrict the active processing of your data without deleting it.
• Right to data portability: Where processing is carried out on the basis of your consent or for the performance of a contract, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes.

heybajii will never charge a fee for the exercise of these rights under normal circumstances. In the case of requests that are manifestly unfounded or excessive in scope, we reserve the right to charge a reasonable administrative fee or decline to act, with written explanation provided to the requesting party.

7. Data Security Measures

heybajii takes the security of your personal information seriously and employs a layered approach to data protection that encompasses technical, administrative, and physical safeguards. The following measures are in place to protect player data:

• 256-bit SSL/TLS encryption: All connections between your device and heybajii are encrypted using industry-standard SSL/TLS protocols, ensuring that data transmitted to and from the platform cannot be read by unauthorised parties.
• Encrypted data storage: Sensitive data fields — including identity document references, payment method identifiers, and account credentials — are stored in encrypted form. Passwords are hashed using a one-way cryptographic function and are never stored in recoverable plain text.
• Access controls: Access to personal player data is restricted on a need-to-know basis. Staff members are granted the minimum level of data access required to perform their job functions, and all access is logged and audited.
• Intrusion detection and monitoring: heybajii operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Regular security assessments: Our platform undergoes periodic security reviews and vulnerability assessments conducted by qualified security professionals to identify and remediate potential weaknesses before they can be exploited.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security. 2FA helps prevent unauthorised access even in the event that your password is compromised.

In the event of a data security incident that is reasonably likely to result in a risk to the rights and freedoms of affected players, heybajii will notify affected individuals and, where required, the relevant supervisory authority, within the timeframe required by applicable law. Notification will be provided via the email address registered to your account.

8. Updates to This Policy

heybajii reserves the right to update, revise, or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When material changes are made, we will:

• Update the "Last Updated" date displayed at the top of this page.
• Publish an announcement on the heybajii platform notifying registered players of the change.
• Where the changes are significant and affect the way in which we process your personal data, send a direct notification to your registered email address with a summary of the key changes.

Your continued use of heybajii following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and may request account closure via our support team.

We encourage all players to review this Privacy Policy periodically to stay informed about how heybajii protects and manages their personal information. Archived versions of previous Privacy Policies are available on request from our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by heybajii, please contact our support team via live chat on the website. Support is available 24 hours a day, seven days a week. You may also reach us by email at:

support@heybajii — please include "Privacy Request" in the subject line for the fastest routing to our data protection team.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. heybajii is committed to maintaining the highest standards of data privacy and transparency for all players in Bangladesh and beyond.