Your Privacy Matters
at hey bajji

Section 1

Information We Collect

hey bajji collects personal information from you in several ways: directly when you register and use the platform, automatically as you interact with the website, and from third-party sources such as your mobile financial service provider during payment processing. The categories of personal data we collect include:

• Full legal name as it appears on your National ID (NID) or passport
• Date of birth (used for mandatory age verification — 18+ requirement)
• Email address registered to your hey bajji account
• Bangladesh mobile phone number linked to your preferred MFS provider (bKash, Nagad, Rocket, or Upay)
• Chosen username and encrypted password hash (we do not store your plain-text password)
• City or district of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) — collected for market analytics and responsible gaming purposes

As part of our Know Your Customer (KYC) process, we may request and securely store copies of the following identity documents when required to verify your age, identity, or the source of your funds:

• National Identity Card (NID) — front and back scan or photograph
• Passport (biographical data page)
• Birth certificate (for supplementary age verification where NID is unavailable)
• Selfie or live photograph taken at the time of identity verification

• Deposit and withdrawal amounts in ৳ Taka (BDT)
• MFS transaction reference numbers issued by bKash, Nagad, Rocket, or Upay
• The mobile number associated with each MFS transaction
• Date, time, and status of each financial transaction

• Bets placed, games played, stakes, and outcomes across all products (cricket, slots, casino, instant games)
• Session duration, login times, and gaming frequency
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

• IP address and approximate geographic location
• Browser type, version, and operating system
• Device type (mobile, tablet, desktop) and screen resolution
• Pages visited, links clicked, time spent on each page, and referral source
• Cookie identifiers and session tokens (see Section 5)

• Content of live chat conversations with our support team
• Email correspondence sent to [email protected]
• Feedback, complaint, and dispute records

Section 2

How We Use Your Data

hey bajji uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose beyond what is described in this Policy without first obtaining your consent or having another lawful basis for doing so.

Section 3

Legal Basis for Processing

hey bajji processes personal data only where a valid lawful basis exists. The principal bases on which we rely are as follows:

• Contract Performance: The majority of data processing on hey bajji is necessary to deliver the service you have registered for — including account management, payment processing, game access, and customer support. Without this processing, we cannot provide the platform to you.
• Legal Obligation: Certain processing is required by law, including age verification (18+ compliance), anti-money laundering (AML) record-keeping, fraud investigation, and cooperation with regulatory or law enforcement inquiries.
• Legitimate Interests: hey bajji processes some data on the basis of legitimate business interests, including platform security, abuse detection, responsible gaming monitoring, and improving the quality of our services. We apply a balancing test to ensure our legitimate interests do not override your fundamental rights.
• Consent: Where we process data for optional purposes such as personalised marketing, targeted promotions, or optional analytics cookies, we do so on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Section 4

Data Sharing & Disclosure

hey bajji does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

To process your deposits and withdrawals, we share the minimum necessary transaction data with your chosen MFS provider (bKash, Nagad, Rocket, or Upay). This is limited to the transaction amount, your registered mobile number, and the transaction reference. These providers process this data under their own privacy policies and terms of service, which we encourage you to review.

hey bajji integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games, a limited set of non-sensitive technical data (such as a pseudonymous session token and your stake/balance information for the active session) is shared with the relevant provider. We do not share your name, NID, or contact details with game providers.

We may use specialist third-party KYC and identity verification services to process the documents you provide during the verification process. These services are contractually bound to use your data solely for identity verification purposes on behalf of hey bajji.

hey bajji may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of hey bajji, our players, or the public. We will notify you of such disclosure where legally permitted to do so.

Section 5

Cookies & Tracking Technologies

hey bajji uses cookies and similar tracking technologies (including local storage tokens and session identifiers) to provide a functional, secure, and personalised experience on our platform. The following table explains the categories of cookies we use.

You can manage your cookie preferences at any time via the Cookie Settings panel accessible from the footer of the hey bajji platform. Strictly necessary cookies cannot be disabled as they are essential to the secure operation of your account. Disabling functional or analytics cookies may affect certain platform features.

Section 6

Data Retention

hey bajji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, comply with our legal obligations, and resolve any disputes or enforce our agreements. The following retention periods apply:

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and research purposes.

Section 7

Your Privacy Rights

As a player on hey bajji, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond within 10 business days of receiving a valid request.

• Right of Access: You may request a copy of all personal data we hold about you, including your account data, KYC records, transaction history, and gameplay data. We will provide this in a clear, structured format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic profile information directly within Account Settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. Note that certain data must be retained to fulfil our legal obligations (see Section 6) and cannot be erased on request.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while a dispute about accuracy or lawful basis is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object at any time to processing based on legitimate interests — including direct marketing profiling. Where you object to marketing, we will stop processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing relies on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

Section 8

Data Security

hey bajji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security practices include:

• SSL/TLS Encryption in Transit: All data transmitted between your browser or device and the hey bajji platform is encrypted using TLS 1.2 or higher. This protects your login credentials, personal details, and payment information from interception during transmission.
• Encryption at Rest: Sensitive data fields — including password hashes, NID numbers, and KYC document images — are encrypted at rest in our database infrastructure. Plain-text passwords are never stored.
• Access Controls: Access to personal data within hey bajji's internal systems is restricted on a strict need-to-know basis. Staff are granted only the minimum access required to perform their role, and all access is logged and auditable.
• Intrusion Detection & Monitoring: Our platform infrastructure is continuously monitored for suspicious activity, unusual login patterns, and potential security breaches. Automated alerts are configured to flag anomalies for immediate investigation.
• Regular Security Reviews: hey bajji conducts periodic security assessments of our platform, including vulnerability scanning and internal process audits, to identify and address potential weaknesses before they can be exploited.
• Staff Training: All hey bajji team members who handle personal data receive training on data protection obligations, secure data handling procedures, and how to identify and respond to potential data incidents.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, hey bajji will notify affected players without undue delay — and in any case within 72 hours of becoming aware of the breach — via the email address registered to their account. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures taken or proposed to address it.

Section 9

Third-Party Services

The hey bajji platform integrates with third-party service providers to deliver core platform functionality. Each third-party provider processes data under their own privacy policies. hey bajji is not responsible for the privacy practices of third-party services, but we carefully vet all partners to ensure they maintain appropriate data protection standards. Our key third-party integrations include:

• Mobile Financial Services: bKash, Nagad, Rocket, and Upay process payment transaction data to complete your deposits and withdrawals. These are regulated financial service providers operating under the oversight of Bangladesh Bank.
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios provide the game engines and random number generation (RNG) technology powering games on hey bajji. Limited session data is exchanged to facilitate gameplay.
• KYC & Identity Verification: Third-party KYC service providers process identity document images and verification checks on behalf of hey bajji. These providers are bound by strict data processing agreements.
• Analytics Infrastructure: hey bajji uses analytics tools to understand platform usage patterns. Where analytics cookies are used, they collect pseudonymised data only. Your full identity is never shared with analytics providers.

The hey bajji website may contain links to external informational resources (such as responsible gaming organisations). These external sites are not operated by hey bajji and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any external website you visit.

Section 10

Updates to This Policy

hey bajji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered players via the email address associated with their account and display a prominent notice on the platform at the time of next login.

The updated Policy will be published on this page with a revised effective date at the top. Minor amendments — such as clarifications of existing provisions, corrections of factual errors, or updates to contact details — may be made without prior notification, provided they do not materially affect your rights. We encourage you to review this page periodically to stay informed of how hey bajji protects your personal information.

Your continued use of the hey bajji platform following the publication of any revised Privacy Policy constitutes your acknowledgement that you have been informed of the update. If you disagree with any changes to this Policy, you should discontinue use of the platform and may request account closure by contacting our support team.

Section 11

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hey bajji handles your personal data, please do not hesitate to get in touch. Our support team is available 24 hours a day, 7 days a week, and responds to privacy-related enquiries within 1 hour during Bangladesh Standard Time (BST, UTC+6) business hours, and within 10 business days for formal written privacy rights requests.