Privacy Policy for heybaij

1. Information We Collect

heybaij collects personal information from users in order to provide a secure, personalised, and legally compliant gaming experience. The categories of information we collect depend on how you interact with the platform and at what stage of your relationship with heybaij you are at.

1.1 Information You Provide Directly

When you register for an account on heybaij, we collect the information you submit in the registration form. This includes:

• Full legal name
• Date of birth (used for age verification — heybaij is an 18+ platform)
• Residential address, including city (e.g., Dhaka, Chattogram, Sylhet, Rajshahi, Khulna)
• Mobile phone number
• Email address
• Chosen username and hashed password
• Payment method details (mobile wallet numbers for bKash, Nagad, Rocket, Upay; bank account identifiers for Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank)

Where heybaij requests identity verification (KYC), you may also be asked to submit copies of identity documents such as your National Identity Card (NID), passport, or proof of residential address. These documents are processed solely for compliance purposes and are handled with the highest level of care.

1.2 Information Collected Automatically

When you access and use the heybaij platform, certain technical data is collected automatically through your browser and device. This includes:

Data Type	What Is Collected	Purpose
IP Address	Your device's internet protocol address	Fraud prevention, geographic access control, security logging
Device Information	Device type, operating system, browser version	Platform optimisation, session security
Session Data	Login timestamps, session duration, pages visited	Account security, responsible gaming monitoring
Betting & Game History	All wagers placed, game sessions, outcomes, stake amounts	Dispute resolution, responsible gaming, legal compliance
Transaction Records	Deposit and withdrawal amounts, dates, payment methods used	Financial record-keeping, anti-money laundering (AML) compliance
Communication Records	Support chat logs, email correspondence	Customer service quality, dispute resolution

1.3 Information from Third Parties

In certain circumstances, heybaij may receive information about you from trusted third-party sources, including payment processors (such as bKash and Nagad), identity verification service providers, fraud detection agencies, and game software providers such as Pragmatic Play, Evolution Gaming, and Spribe. This information is used solely to supplement our own records for the purposes of verification, fraud prevention, and service delivery.

2. How We Use Your Data

heybaij processes personal data only for clearly defined, legitimate purposes. We do not sell personal data to third parties for commercial marketing. The primary purposes for which we use your data are as follows:

• Account Management: Creating and maintaining your heybaij account, processing login authentication, and enabling access to the platform's features.
• Identity Verification: Confirming that you meet the minimum age requirement of 18 years and that your account details are accurate and verifiable.
• Payment Processing: Facilitating deposits and withdrawals through your chosen payment method, and maintaining accurate financial records of all transactions in Bangladeshi Taka (৳).
• Game & Betting Services: Recording game sessions and bet settlements accurately, resolving any disputes that arise regarding game outcomes or account balances.
• Legal & Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) requirements.
• Responsible Gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, and facilitating the application of self-exclusion, deposit limits, or session restrictions when requested by a player.
• Customer Support: Responding to queries, resolving complaints, and delivering a consistent quality of service across all support channels.
• Platform Security: Detecting and preventing fraudulent activity, unauthorised account access, and technical abuse of the platform.
• Service Improvement: Analysing aggregate, anonymised usage data to improve platform performance, game selection, and user experience.
• Marketing Communications: Sending promotional emails or in-platform notifications about bonuses, offers, and new game releases — only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.

3. Sharing of Personal Data

heybaij does not sell, rent, or trade your personal data to any third party. We share personal information only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose.

3.1 Service Providers and Partners

We share data with carefully selected third-party service providers who assist us in operating the heybaij platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and partner banks require transaction data to process deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC service providers receive identity document data to verify account holder identity and age.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers to deliver game content and resolve round-level disputes.
• IT infrastructure providers: Hosting and cloud service providers store platform data in secure, access-controlled environments.
• Customer support platforms: Support ticketing and live chat tools process communication records for service delivery purposes.

All third-party service providers engaged by heybaij are contractually required to process personal data only for the specific purpose for which it was shared, to maintain adequate security standards, and not to disclose your data to any further party without prior authorisation from heybaij.

3.2 Legal Disclosure

heybaij may be required by law, court order, or regulatory authority to disclose personal data without prior notice to you. We will comply with such legally mandated disclosures while taking all reasonable steps to minimise the scope of information disclosed. Where legally permissible, we will notify you of any such disclosure.

3.3 Business Transfers

In the event that heybaij undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify registered players of any such change via the email address on file before personal data is transferred or becomes subject to a different privacy policy.

4. Cookies & Tracking Technologies

heybaij uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to improve overall performance. A cookie is a small text file stored on your device by your browser when you visit a website.

4.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, keep your account secure, process transactions	Session / up to 24 hours
Functional	Remember your language preferences, display settings, and game history	Up to 12 months
Analytics	Aggregate, anonymised data on how users navigate the platform, used to improve UX	Up to 24 months
Security	Detect and prevent fraudulent or abusive behaviour, bot mitigation	Session / rolling

Strictly necessary cookies cannot be disabled as they are essential to the operation of the heybaij platform. For functional and analytics cookies, you may adjust your browser settings to refuse or delete cookies at any time. Note that disabling certain cookies may affect the functionality of the platform, including your ability to stay logged in or access game history.

4.2 Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal to websites. heybaij currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for how such signals should be interpreted. We will update this position if an industry-wide standard is adopted.

5. Data Security Measures

heybaij takes the security of your personal data seriously. We implement a range of technical and organisational security measures to protect your information against unauthorised access, disclosure, alteration, or destruction.

Our security measures include, but are not limited to:

• 128-bit SSL/TLS encryption on all data transmitted between your browser and the heybaij platform, ensuring that your login credentials, payment details, and personal information are protected in transit.
• Encrypted password storage — your account password is never stored in plain text. It is hashed using a one-way cryptographic algorithm, meaning even heybaij staff cannot view your password.
• Access controls — personal data is accessible only to authorised heybaij staff and verified third-party processors on a strict need-to-know basis. Staff access is logged and audited.
• Fraud detection systems — automated tools monitor account activity continuously for suspicious patterns, including unusual login locations, atypical transaction volumes, and signs of account compromise.
• Regular security reviews — heybaij conducts periodic internal reviews of our data handling practices, systems, and security controls to identify and address potential vulnerabilities.

6. Data Retention & Deletion

heybaij retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce agreements. The general retention periods that apply to key categories of data are as follows:

• Account registration data: Retained for the duration of your account plus a minimum of five years after account closure, in order to meet AML and KYC record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Betting and game history: Retained for a minimum of three years from the date of each game session or bet settlement.
• Customer support communications: Retained for a minimum of two years from the date of the last interaction.
• Identity verification documents: Retained for the duration of account activity plus five years after account closure, or longer if required by applicable law.
• Marketing consent records: Retained for as long as you remain subscribed and for a reasonable period after unsubscription, solely for the purpose of demonstrating consent history.

Where data is no longer required for any active purpose and the applicable retention period has elapsed, heybaij will securely delete or anonymise the data in a manner that prevents it from being reconstructed or reidentified.

7. Your Privacy Rights

As a user of heybaij, you hold a number of rights in relation to your personal data. heybaij is committed to honouring these rights in a timely and transparent manner. Your rights include:

• Right of Access: You have the right to request a copy of the personal data heybaij holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly within your account settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Note that this right is limited where retention is required by law (e.g., AML record-keeping obligations) or where data is necessary to resolve an outstanding dispute.
• Right to Restrict Processing: You may request that heybaij temporarily suspend its processing of your personal data in specific circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where technically feasible, you may request a copy of the data you have provided to heybaij in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, subject to our demonstrating compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the heybaij privacy team at support@heybaij. We may ask you to verify your identity before processing a request, to ensure that personal data is not disclosed to or altered on behalf of an unauthorised party. We aim to respond to all legitimate requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

8. Updates to This Policy

heybaij reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, changes in applicable law, or the introduction of new platform features. When material changes are made, we will notify registered players by email or via a prominent notice on the heybaij platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document reflects when the most recent revision was published. We encourage you to review this Privacy Policy regularly to stay informed about how heybaij handles your personal data.

Your continued use of the heybaij platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the updated Privacy Policy, you should discontinue use of the platform and may request account closure by contacting us at support@heybaij.