Heibaji Privacy Policy

1 Who We Are

Heibaji operates the online betting and gaming platform available at heibaji.app and through the heibaji mobile application. In this Privacy Policy, "heibaji", "we", "us", and "our" refer to the operator of the heibaji platform. "You" and "your" refer to any person who visits, registers on, or uses the heibaji platform in any capacity.

Heibaji acts as the data controller for the personal information collected through the heibaji platform. This means we are responsible for deciding how and why your personal data is processed. If you have any questions about how heibaji handles your data, you can contact us at any time at [email protected].

2 Data We Collect

Heibaji collects personal data in several categories depending on how you interact with the platform. The table below summarises the main categories of data we collect and examples of the specific data points within each category.

Heibaji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where this is strictly required by our responsible gaming obligations — for example, where a player discloses a gambling-related health concern when requesting self-exclusion.

3 How We Collect Your Data

Heibaji collects personal data through the following channels:

• Direct registration: When you create a heibaji account, you provide your name, contact details, date of birth, and payment information directly to us.
• KYC verification: When you submit identity documents for account verification, heibaji collects copies of those documents and the data contained within them.
• Platform activity: As you use heibaji — placing bets, playing games, making deposits and withdrawals — we automatically record the data associated with those activities.
• Device and browser data: Heibaji's servers automatically log technical data such as your IP address, device type, and browser version each time you connect to the platform.
• Cookies and tracking technologies: Heibaji uses cookies and similar technologies to recognise your device, maintain your session, and analyse platform usage. See Section 7 for full details.
• Support interactions: When you contact heibaji support via email or live chat, we retain records of those communications to help resolve your query and improve our service.
• Third-party payment providers: When you make a deposit or withdrawal, heibaji receives confirmation data from your payment provider (e.g. bKash, Nagad) to verify the transaction.

4 Why We Use Your Data

Heibaji uses your personal data for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The main purposes for which heibaji processes your personal data are:

• Account management: To create, maintain, and secure your heibaji account, including verifying your identity and processing your login credentials.
• Payment processing: To process deposits and withdrawals, verify payment methods, and maintain accurate financial records for your heibaji account.
• Legal compliance: To meet our Know Your Customer (KYC), Anti-Money Laundering (AML), and responsible gaming obligations under applicable law and our licensing conditions.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, and other security threats to the heibaji platform and its players.
• Customer support: To respond to your queries, resolve disputes, and improve the quality of heibaji's support services.
• Platform improvement: To analyse how players use heibaji, identify technical issues, and develop new features and games that better serve our players.
• Responsible gaming: To monitor gaming behaviour, identify signs of problem gambling, and apply responsible gaming tools where appropriate.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You can opt out at any time.

5 Legal Basis for Processing

Heibaji processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing that is necessary to provide the heibaji service you have signed up for, including account management, payment processing, and game delivery.
• Legal obligation: Processing that heibaji is required to carry out under applicable law, including KYC verification, AML checks, and responsible gaming monitoring.
• Legitimate interests: Processing that serves heibaji's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing that is based on your explicit consent, such as sending you marketing communications. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Sharing Your Data

Heibaji does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: Heibaji shares transaction data with bKash, Nagad, Rocket, and other payment providers to process your deposits and withdrawals. These providers are bound by their own privacy policies and data protection obligations.
• Identity verification providers: Heibaji uses third-party KYC service providers to verify the identity documents you submit. These providers process your data solely for verification purposes and are contractually prohibited from using it for any other purpose.
• Fraud prevention services: Heibaji shares technical data (such as IP addresses and device fingerprints) with fraud detection services to identify and prevent fraudulent activity on the platform.
• Regulatory and law enforcement authorities: Heibaji may be required by law to disclose your personal data to regulatory bodies, law enforcement agencies, or courts. We will only make such disclosures where we are legally obliged to do so.
• IT and hosting providers: Heibaji uses third-party cloud hosting and IT infrastructure providers to operate the platform. These providers have access to data stored on our servers but are contractually bound to process it only on our instructions.

7 Cookies and Tracking Technologies

Heibaji uses cookies and similar tracking technologies on the heibaji website and mobile app. Cookies are small text files stored on your device that help heibaji recognise you, maintain your session, and understand how you use the platform.

Heibaji uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the heibaji platform to function. They maintain your login session, remember your language preferences, and enable core platform features. You cannot opt out of strictly necessary cookies.
• Performance cookies: These cookies collect anonymised data about how players use heibaji — which pages are visited most, where errors occur, and how long sessions last. This data helps us improve the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred deposit method or game settings — so you do not have to re-enter them each time you visit heibaji.
• Security cookies: These cookies help heibaji detect and prevent fraudulent activity, including session hijacking and cross-site request forgery attacks.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the heibaji platform. For full details on the cookies heibaji uses, please refer to our Cookie Policy, available on request from [email protected].

8 Data Retention

Heibaji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following retention periods apply:

• Active account data: Retained for the duration of your heibaji account and for a period of five years after account closure, in line with our AML and regulatory obligations.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, as required by applicable financial regulations.
• KYC documents: Retained for five years after account closure or the end of the business relationship, whichever is later.
• Support communications: Retained for two years from the date of the last communication, unless the communication relates to an ongoing dispute or legal matter.
• Marketing preferences: Retained until you withdraw consent or request deletion, plus a short period to process the opt-out.
• Technical and log data: Retained for up to 12 months for security and fraud prevention purposes.

When your data is no longer required, heibaji will securely delete or anonymise it so that it can no longer be associated with you.

9 Your Privacy Rights

As a heibaji player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.

10 Data Security

Heibaji takes the security of your personal data seriously. We have implemented a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• AES-256 encryption for all personal data stored on heibaji servers.
• TLS 1.3 encryption for all data transmitted between your device and the heibaji platform.
• Multi-factor authentication options for heibaji player accounts.
• Regular penetration testing and security audits of the heibaji platform.
• Strict access controls ensuring that only authorised heibaji staff can access personal data, and only to the extent required for their role.
• Automated monitoring systems that detect and alert on suspicious access patterns or potential data breaches.

While heibaji takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your heibaji account secure — use a strong, unique password, enable two-factor authentication where available, and never share your login credentials with anyone.

11 Children's Privacy

The heibaji platform is strictly for adults aged 18 and over. Heibaji does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on heibaji or provided personal data to us, please contact [email protected] immediately.

Upon receiving a verified report of underage use, heibaji will immediately suspend the account, delete any personal data collected from the minor, and return any deposits made, minus any winnings generated. Heibaji uses age verification checks at registration and at the point of first withdrawal to enforce this policy.

12 Changes to This Privacy Policy

Heibaji may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players via email or through a prominent notice on the heibaji platform before the changes take effect.

The "Last updated" date at the top of this page reflects when the Privacy Policy was most recently revised. We encourage you to review this policy periodically. Your continued use of heibaji after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

If you disagree with any changes to this Privacy Policy, you may close your heibaji account by contacting [email protected]. We will process your account closure request and handle your remaining data in accordance with our retention obligations.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way heibaji handles your personal data, please get in touch with our team:

• Email: [email protected]
• Subject line for privacy requests: "Privacy Request"
• Response time: Within 30 days for data subject requests; within 2 hours for urgent account security issues
• Support hours: 24 hours a day, 7 days a week

For information about your rights under the heibaji Terms and Conditions, or for responsible gaming support, please visit the Responsible Gaming page. General platform questions are answered in the FAQ.