Privacy Policy
heybajee
At heybajee, your privacy is a core commitment — not an afterthought. This Privacy Policy explains precisely what personal data we collect from Bangladesh players, why we collect it, how we use and protect it, and what rights you hold over your information at every stage of your account lifecycle.
256-Bit SSL Encryption
Every data transmission between your device and heybajee is protected by industry-standard 256-bit SSL encryption — the same level used by international banking institutions.
Minimal Data Collection
heybajee collects only the personal data that is strictly necessary to operate your account, verify your identity, process transactions, and comply with our legal obligations.
Your Rights, Protected
As a heybajee player, you hold the right to access, correct, export, or request deletion of your personal data at any time by contacting our 24/7 English support team.
Data We Collect
heybajee collects personal data through several channels: directly from you at account registration and during the KYC verification process, automatically through your use of the platform, and in limited circumstances from trusted third-party service providers. All data collection is proportionate to the purpose for which it is collected and is handled in accordance with internationally recognised data protection principles.
1.1 Registration Data
When you create a heybajee account, we collect the following information: your full legal name (as it appears on your government-issued ID), your date of birth, a valid email address, your Bangladesh mobile phone number, a password of your choosing, and your residential address in Bangladesh. This information is essential for account creation, identity verification, and the delivery of account communications.
1.2 Identity Verification (KYC) Data
As part of our mandatory Know Your Customer (KYC) obligations, we collect copies of government-issued identity documents. These may include your Bangladesh National ID (NID) card, passport, or driving licence. We also collect proof of address documents (such as a utility bill or bank statement dated within the last three months) and, where required, evidence of your payment method ownership (for example, a screenshot confirming that the bKash or Nagad wallet used for deposits is registered in your name). KYC documents are stored in encrypted form and are never shared with third parties except as required by law or as described in Section 3 of this policy.
1.3 Transaction & Financial Data
heybajee records all financial transactions conducted through your account. This includes deposit amounts, withdrawal amounts, payment method identifiers (such as the mobile number associated with your bKash or Nagad wallet, or the last four digits of a Visa or Mastercard), transaction timestamps, and transaction reference numbers. We do not store full card numbers, CVV codes, or full mobile wallet PINs on our servers. Payment processing is handled by our secure payment partners, and only tokenised or masked identifiers are retained by heybajee.
1.4 Gameplay & Betting Data
We collect detailed records of your gaming and betting activity on the heybajee platform. This includes game titles played, bet amounts, win/loss outcomes, session durations, and sports betting markets selected. This data is used to provide your account history, calculate bonus wagering progress, identify responsible gaming indicators, and — in aggregate and anonymised form — improve the heybajee platform. Individual gameplay records are retained as part of your account history and may be reviewed by you at any time via your account dashboard.
Data Categories Summary
| Category | Examples |
|---|---|
| Identity | Name, DOB, NID, passport |
| Contact | Email, phone, address |
| Financial | Deposits, withdrawals, payment method tokens |
| Gameplay | Bets, sessions, game history |
| Technical | IP address, device type, browser |
| Behavioural | Pages visited, click patterns, session length |
heybajee does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than photo ID for KYC), or medical records. If you voluntarily disclose such information to our support team, it will be used solely to address your query and will not be stored in your player profile.
1.5 Technical & Device Data
When you access heybajee, our systems automatically collect certain technical information from your device and browser. This includes your IP address, device type (desktop, mobile, or tablet), operating system, browser type and version, screen resolution, and the URL of the page you visited immediately before arriving at heybajee. This data is used for security monitoring (for example, to detect suspicious login attempts from unfamiliar IP addresses), platform optimisation, and fraud prevention. Your IP address may also be used to confirm that you are accessing heybajee from Bangladesh and not from a jurisdiction where access is restricted.
1.6 Communications Data
If you contact heybajee's support team — whether via live chat, email, or any other communication channel — we retain records of those communications, including your messages, our responses, and any attachments exchanged. This data is used to resolve your query, maintain a service history for quality assurance purposes, and, where relevant, as evidence in dispute investigations. Support communications are retained for a period consistent with the data retention schedule outlined in Section 5.
How We Use Your Data
heybajee processes your personal data only for specific, legitimate purposes. We do not sell your data to third parties, and we do not use your data for purposes that are incompatible with those stated at the time of collection. The legal bases on which we rely for processing your data are: performance of a contract (your account agreement with heybajee), compliance with legal obligations, legitimate interests pursued by heybajee (such as fraud prevention and platform security), and in limited cases, your explicit consent.
Account Management
We use your registration and identity data to create and maintain your heybajee account, verify your identity during KYC, authenticate your login sessions, and communicate important account information such as security alerts, transaction confirmations, and policy updates.
Transaction Processing
Your financial and payment method data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to verify that payments are made from accounts registered in your name, and to maintain accurate financial records for your account history.
Fraud Prevention & Security
Technical and behavioural data — including IP addresses, device fingerprints, and session patterns — is used to detect and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, and money laundering on the heybajee platform.
Responsible Gaming
Gameplay and betting data is monitored to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, heybajee may proactively reach out to the player with responsible gaming resources and tool suggestions, in line with our duty of care obligations.
2.1 Marketing Communications
heybajee may use your email address and mobile number to send you promotional communications about new games, bonuses, and platform features — but only where you have given your explicit consent to receive such communications at the time of registration or subsequently opted in via your account preferences. You may withdraw your consent to marketing communications at any time by updating your account notification settings or by contacting support at support@heybajee. Withdrawal of consent to marketing does not affect the processing of data for account management or legal compliance purposes.
2.2 Legal & Regulatory Compliance
heybajee is required by applicable law and our operating obligations to retain certain player data for defined periods, report suspicious transactions, respond to lawful requests from competent authorities, and co-operate with fraud investigations. In these circumstances, data processing is mandatory and cannot be restricted by the individual player.
2.3 Platform Improvement
Aggregated and anonymised data derived from gameplay activity, navigation behaviour, and support interactions is used to improve the heybajee platform — for example, to identify underperforming features, optimise game loading times, improve our mobile web experience for Bangladesh players, and develop new promotional offerings. This anonymised data cannot be linked back to any individual player and is therefore not subject to individual data rights requests.
Data Sharing & Third Parties
heybajee does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose. All third-party service providers who receive your data are contractually required to handle it securely and in accordance with applicable data protection standards.
Categories of Third-Party Recipients
| Recipient Type | Purpose | Data Shared |
|---|---|---|
| Payment processors | Deposit & withdrawal processing | Payment tokens, transaction amounts |
| KYC / identity verification | Age & identity verification | ID documents, name, DOB |
| Game providers | Game delivery & RNG certification | Session ID, bet history (anonymised) |
| Fraud prevention | Multi-accounting & fraud detection | IP, device fingerprint, login patterns |
| Legal authorities | Regulatory compliance & legal orders | As required by the relevant order |
| IT infrastructure | Hosting, CDN, security monitoring | Encrypted account data, logs |
heybajee does not and will never sell, rent, or exchange your personal data with advertising networks, data brokers, or any third party for commercial gain. Your data is used exclusively to operate your heybajee account and comply with our legal obligations.
Some of our third-party service providers may be located outside Bangladesh. Where your data is transferred internationally, heybajee ensures that appropriate safeguards are in place — such as contractual data protection clauses — to maintain the security and privacy of your personal information throughout the transfer.
3.1 Game Providers
Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate their own server-side game engines to determine game outcomes. When you play a game on heybajee, a session identifier and anonymised bet data are transmitted to the relevant game provider's server to facilitate the game round. Game providers do not receive your full name, contact details, or payment information — only the minimum session data required to run the game.
3.2 Legal Disclosures
heybajee may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, where we receive a valid legal order, or where disclosure is necessary to protect the rights, property, or safety of heybajee, its players, or the general public. We will notify you of any such disclosure where we are legally permitted to do so.
Cookies & Tracking Technologies
heybajee uses cookies and similar tracking technologies to operate certain essential platform functions, remember your preferences, maintain your login session, and — with your consent — analyse how players use the platform so that we can continuously improve it. A cookie is a small text file that is placed on your device when you visit heybajee. Cookies do not contain executable code and cannot be used to access other data stored on your device.
4.1 Essential Cookies
Essential cookies are strictly necessary for the heybajee platform to function. They enable core features such as maintaining your login session across pages, remembering items in your bet slip, applying your preferred language and display settings, and ensuring secure HTTPS connections. Essential cookies cannot be disabled without breaking core platform functionality. They do not require your consent under applicable data protection principles as they are necessary for the performance of the services you have requested.
4.2 Analytics Cookies
With your consent, heybajee uses analytics cookies to collect anonymised data about how players navigate the platform — including which pages are visited most frequently, how long sessions last, and where players encounter errors or drop off. This data is used in aggregate only and cannot identify you individually. Analytics cookies help us improve the Bangladesh player experience on heybajee over time.
4.3 Managing Your Cookie Preferences
You can control cookie settings through your browser's privacy or settings menu. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Please note that disabling essential cookies may prevent certain heybajee features from working correctly. Disabling analytics cookies will not affect your ability to play games, deposit, or withdraw.
Cookie Types Used on heybajee
| Type | Purpose | Consent |
|---|---|---|
| Session | Login state, security | Not required |
| Preference | Display & language settings | Not required |
| Analytics | Page performance, navigation | Required |
| Security | CSRF protection, fraud detection | Not required |
Data Retention
heybajee retains your personal data for as long as your account is active and for defined periods after account closure, as required by our legal and operational obligations. We do not retain data for longer than is necessary for the purpose for which it was collected. The retention schedule below reflects heybajee's standard data retention practice. In exceptional circumstances — for example, where data is the subject of active legal proceedings — data may be retained beyond the standard period until the matter is resolved.
Standard Data Retention Schedule
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | 5 years after account closure | Legal obligation / AML |
| KYC identity documents | 5 years after account closure | Legal obligation / AML |
| Financial transaction records | 5 years after account closure | Legal obligation / AML |
| Gameplay & betting records | 3 years after account closure | Legitimate interest / disputes |
| Support communications | 3 years after last interaction | Legitimate interest / disputes |
| Marketing consent records | Until consent withdrawn + 1 year | Consent / legal proof |
| Analytics data (anonymised) | Indefinite (anonymised) | Legitimate interest |
| Security & access logs | 12 months | Legitimate interest / fraud prevention |
Once the applicable retention period has elapsed and there is no legal reason to retain your data further, heybajee will securely delete or irreversibly anonymise your personal data. Deletion is carried out using industry-standard secure erasure methods.
Anti-money laundering (AML) regulations require heybajee to retain identity and financial transaction records for a minimum of five years following account closure. This obligation cannot be waived even if a player requests deletion of their data during this period.
Your Privacy Rights
As a heybajee player, you hold a number of rights in relation to your personal data. These rights are designed to give you genuine control over the information we hold about you. To exercise any of the rights listed below, please contact heybajee's support team at support@heybajee with a clear description of your request. We will acknowledge your request within 5 business days and provide a full response within 30 days.
Right of Access
You have the right to request a copy of all personal data that heybajee holds about you. We will provide this in a clear, structured format within 30 days of your request at no charge.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update some information directly through your account profile settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where it has been unlawfully processed — subject to our legal retention obligations.
Right to Restriction
You have the right to request that heybajee restricts the processing of your personal data while a rectification request is under review, or while a legitimate interest objection is being assessed.
Right to Portability
Where processing is based on your consent or the performance of a contract and carried out by automated means, you may request that your data be provided to you — or transferred to another provider — in a structured, machine-readable format.
Right to Object
You have the right to object to heybajee's processing of your data where that processing is based on legitimate interests — including profiling for responsible gaming monitoring. You may also object to direct marketing at any time.
Submit your data rights request in writing to support@heybajee with the subject line "Data Rights Request". Please include your registered name, email address, and a clear description of the right you wish to exercise. We may ask for additional information to verify your identity before processing the request. Requests are handled within 30 days; complex requests may take up to 60 days, in which case we will notify you of the extension.
Data Security Measures
heybajee implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures are reviewed and updated regularly in line with industry best practices and the evolving threat landscape.
7.1 Encryption
All data transmitted between your browser or mobile device and heybajee's servers is protected using TLS 1.2 or higher (256-bit SSL encryption). Data stored on our servers — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption. Passwords are stored as salted cryptographic hashes and are never retrievable in plain text by heybajee staff.
7.2 Access Controls
Access to personal data within heybajee's internal systems is strictly controlled on a need-to-know basis. Staff members are granted the minimum level of data access required to perform their specific role. All internal data access is logged and subject to regular audit. heybajee staff are trained in data protection obligations and are bound by confidentiality agreements as a condition of employment.
7.3 Incident Response
heybajee maintains a documented data breach incident response procedure. In the event of a confirmed data breach that poses a risk to your rights and freedoms, heybajee will notify affected players via their registered email address within 72 hours of becoming aware of the breach. We will provide clear information about the nature of the breach, the data affected, the likely consequences, and the steps we are taking to address it.
7.4 Your Responsibility
While heybajee takes extensive measures to protect your personal data, you also play an important role in keeping your account secure. You are responsible for maintaining the confidentiality of your heybajee login credentials, choosing a strong and unique password, enabling any available two-factor authentication, and logging out of your account when using a shared or public device. If you suspect that your account has been compromised or that someone else has accessed it without your permission, contact heybajee support immediately at support@heybajee.
Security Measures at a Glance
- TLS 1.2+ / 256-bit SSL on all connections
- AES-256 encryption for data at rest
- Salted password hashing (never stored in plain text)
- Role-based internal access controls
- Full audit logging of all data access
- Regular third-party security assessments
- 72-hour breach notification procedure
- Staff data protection training & NDAs
Never share your heybajee password with anyone — including our support team, who will never ask for it. Use a password that is unique to heybajee and contains a mix of letters, numbers, and symbols. If you receive an unsolicited email claiming to be from heybajee and asking for your credentials, report it to support@heybajee immediately.
Policy Updates & Contact
heybajee reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to this policy, we will notify registered players via email to their registered address and display a prominent notice on the heybajee platform for a period of not less than 14 days prior to the changes taking effect. Your continued use of heybajee after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.
Minor or administrative updates — such as corrections of typographical errors, clarifications that do not alter the substantive meaning of the policy, or updates to contact information — may be made without prior notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision, whether material or administrative.
We encourage all heybajee players in Bangladesh to review this Privacy Policy periodically so that you remain informed about how your personal data is being used and protected. If you have any questions, concerns, or complaints about the way heybajee handles your personal data, please contact our dedicated support team using the details below.
Privacy Enquiries
For all privacy-related requests, data rights submissions, or questions about this Privacy Policy, please contact us in writing:
Email: support@heybajee
Subject line: "Privacy Policy Enquiry"
Response time: within 5 business days for acknowledgement; full response within 30 days.
24/7 Player Support
For general account queries, payment support, or responsible gaming assistance, our English-language support team is available around the clock:
- Live chat: available 24/7 on heybajee
- Email: support@heybajee
- Response within 1 hour via live chat
- Email response within 24 hours
Privacy You Can Count On
At heybajee, privacy protection is built into every layer of our platform — from account creation to withdrawal and beyond. Here is what every Bangladesh player can expect from us.
No Data Selling, Ever
heybajee has never sold player data and never will. Your personal information exists solely to run your account and meet our legal obligations — not to generate advertising revenue.
Plain English Policy
This Privacy Policy is written in straightforward English so that every Bangladesh player can understand exactly what data we collect and why — without needing a legal background to decode it.
Fast Rights Responses
Data rights requests submitted to heybajee are acknowledged within 5 business days and fully resolved within 30 days — well within the timeframes expected under international data protection standards.
Secure Local Payments
All bKash, Nagad, Rocket, and Upay transaction data is handled via tokenised identifiers only. heybajee never stores your full wallet PIN or complete card number on our servers.
Clear Retention Limits
heybajee retains your data only for as long as necessary — typically no more than five years after account closure for identity and financial records, in line with standard AML obligations.
Breach Notification
In the unlikely event of a data security incident affecting your personal information, heybajee will notify you directly by email within 72 hours of confirming the breach — clearly explaining what happened and what we are doing about it.
Ready to Play with Confidence?
Your data is safe with heybajee. Explore cricket betting, live casino games, and slots — all backed by SSL security, local BDT payments, and 24/7 English support for Bangladesh players. 18+ only. Play responsibly.