Privacy Policy — heybajj

1 Information We Collect

When you interact with heybajj — whether by browsing our platform, creating an account, making a deposit, or placing a bet — we may collect and process the following categories of personal data. We are transparent about every data point we gather and the reason it is required.

Registration data — When you create a heybajj account, we collect your full legal name, date of birth, email address, Bangladesh mobile number, and residential address. This information is required to open and manage your account, verify your age, and deliver account-related communications.

Identity verification data — In order to confirm that you are at least 18 years of age and to prevent fraud, we may request a copy of a government-issued photo ID (such as a National ID card or passport) and a proof of address document. These documents are processed securely and retained only for as long as required by our verification obligations.

Financial data — To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, we collect the details necessary to initiate and verify each transaction. We do not store full mobile banking PINs or full bank account credentials on our servers.

Technical and usage data — We automatically collect certain technical data when you visit heybajj, including your IP address, device type, operating system, browser version, pages visited, session duration, and referring URL. This data helps us maintain platform security, diagnose technical issues, and improve the user experience for Bangladesh players.

Communications data — When you contact our support team via live chat, email, or any other channel, we retain records of that communication in order to resolve your query and improve our service quality over time.

2 How We Use Your Data

heybajj processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we use your information are described below.

Where we rely on your consent to process personal data — for example, to send you promotional communications about new games, BPL betting markets, or seasonal offers around Eid or Pohela Boishakh — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

3 Data Sharing & Third Parties

heybajj does not sell your personal data. We may, however, share specific data with carefully selected third parties where it is necessary to deliver our services, fulfil legal obligations, or protect the security of the platform and its users. All third-party recipients are required to handle your data in a manner consistent with this Privacy Policy.

• Payment processors: To facilitate deposits and withdrawals in BDT, we share the minimum necessary financial data with our approved payment partners, which include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These partners operate under their own privacy and security frameworks and are responsible for data processed within their own systems.
• Game providers: To deliver our casino and slot game library — supplied by partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — we may share session tokens and anonymised gameplay identifiers with these providers. We do not share your full personal profile with game providers.
• Identity verification services: Where required for age verification or anti-fraud purposes, we may engage third-party identity verification providers. These providers process your ID documents in a secure environment and return only a verification result to heybajj.
• Analytics and performance tools: We use reputable analytics platforms to understand how players navigate heybajj. These tools receive anonymised or pseudonymised technical data only and are contractually prohibited from using that data for their own purposes.
• Legal and regulatory authorities: We may disclose personal data to relevant authorities where required by applicable law, court order, or regulatory instruction. In such cases, we will disclose only the minimum data required to comply with the legal obligation.
• Business transfers: In the event that heybajj undergoes a merger, acquisition, or asset sale, your personal data may be transferred to the successor entity. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

4 Cookies & Tracking Technologies

heybajj uses cookies — small text files stored on your device — as well as similar technologies such as local storage, session storage, and pixel tags. These technologies help us keep the platform functional, remember your preferences, and understand how players engage with our content so we can continuously improve the experience for Bangladesh users.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, restrict their use to specific sites, or be notified when a cookie is set. Please note that disabling strictly necessary cookies will prevent core platform functions — including login and account access — from working correctly.

We may also use pixel tags (also called web beacons) within promotional emails to understand whether messages have been opened and which links have been followed. If you prefer not to be tracked in this way, you can disable image loading in your email client, which will prevent pixel tags from firing.

5 Data Security & Retention

The security of your personal data is a top priority at heybajj. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, and unlawful disclosure.

• All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by major financial institutions worldwide.
• Personal data at rest is stored in encrypted form within access-controlled server environments. Access to production databases is restricted to a small number of authorised personnel on a need-to-know basis.
• Our platform undergoes regular security assessments, including vulnerability scans and penetration testing carried out by independent security professionals.
• All staff with access to personal data undergo data protection training and are bound by strict confidentiality obligations as a condition of their engagement with heybajj.
• In the event of a data breach that is likely to affect your rights or freedoms, we will notify affected users without undue delay and take all reasonable steps to contain and remediate the incident.

Data retention: heybajj retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable legal obligations. The general retention schedule applied by heybajj is summarised below.

Once the applicable retention period has elapsed and no other lawful basis exists to retain the data, heybajj will securely delete or irreversibly anonymise your personal information so that it can no longer be linked back to you.

6 Your Privacy Rights

As a player registered on heybajj, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights described below, please contact our support team at support@heybajj or via live chat.

7 Children & Age Restriction

heybajj operates a strict 18+ policy across all services and jurisdictions. Our platform is not intended for, directed at, or designed to attract persons under the age of 18. We do not knowingly collect personal data from individuals under 18 years of age.

If we become aware at any point that a person under 18 has created an account or provided personal data on heybajj, we will immediately suspend that account, delete all associated personal data to the extent possible, and reverse any financial transactions where technically and legally feasible. Any winnings generated by an underage account will be forfeited in full, consistent with our Terms & Conditions.

We strongly encourage parents and guardians in Bangladesh to make use of parental control software to restrict access to online gambling platforms. heybajj supports responsible use of internet filtering tools as a complementary measure to our own age verification procedures. For further guidance, please review our Responsible Gaming policy.

8 Changes to This Policy

heybajj reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, we will take reasonable steps to notify registered players before the new version takes effect. Notification methods may include a prominent notice on the heybajj platform, an in-account message, or an email to the address registered on your account.

The effective date shown at the top of this page indicates when the current version was last updated. We recommend reviewing this page periodically so that you remain informed about how heybajj handles your personal data. Continuing to use the platform after changes have been published and notified constitutes your acceptance of the updated Privacy Policy.