hejbaji Privacy Policy
At hejbaji, protecting your personal data is a responsibility we take seriously. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and the rights you hold over your data as a player on Bangladesh's premier betting platform.
Our Core Data Commitments
End-to-End Encryption
Every connection to hejbaji is protected by SSL/TLS encryption. Your account credentials, payment details, and personal information are transmitted and stored using industry-standard encryption protocols at all times.
Minimal Data Collection
hejbaji collects only the personal data that is strictly necessary for account management, payment processing, identity verification, and legal compliance. We do not gather information beyond what is required to operate the platform safely.
No Unauthorised Sharing
Your personal data is never sold to third parties or shared with advertisers. Data is disclosed only to verified service providers operating under strict confidentiality agreements, or when required by applicable law or a lawful authority.
You Control Your Data
Registered hejbaji players hold clear rights over their personal data — including the right to access, correct, restrict processing of, or request deletion of the information we hold about them. Requests are handled promptly by our support team.
Transparent Cookie Use
hejbaji uses cookies strictly for session management, security, and anonymous analytics. We do not deploy cross-site tracking cookies or share browsing data with advertising networks. You may adjust cookie preferences in your browser settings at any time.
Defined Retention Periods
Personal data is held only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. Once the retention period expires, data is securely deleted or irreversibly anonymised.
1. Information We Collect
hejbaji collects personal information from you in the following circumstances: when you register an account, when you make or receive a payment, when you interact with customer support, when you use our platform's features, and when you respond to promotions or surveys. The categories of data we collect are set out below.
1.1 Registration & Identity Data
When you create a hejbaji account, we collect the following information:
- Full legal name as shown on your Bangladesh NID or passport
- Date of birth (to verify that you are 18 years of age or older)
- Email address
- Bangladesh mobile phone number
- Username and encrypted password
- Residential address (city and division within Bangladesh)
1.2 Identity Verification Documents
As part of our Know Your Customer (KYC) obligations and age verification requirements, hejbaji may request copies of the following documents from registered players:
- Bangladesh National Identity Card (NID)
- Valid passport (biographical data page)
- Bangladesh driving licence
- Recent utility bill or bank statement confirming residential address (where required)
1.3 Financial & Transaction Data
When you deposit funds or request a withdrawal, hejbaji collects transaction-related information including your bKash, Nagad, Rocket, or Upay mobile number (or bank account details as applicable), the amount and currency of each transaction, timestamps, and transaction reference numbers. We do not store full card numbers — card transactions are processed via PCI-DSS-compliant payment gateways that handle card data directly.
1.4 Technical & Usage Data
When you access hejbaji via a browser or mobile device, we automatically collect certain technical information including your IP address, device type and operating system, browser type and version, referring URL, pages visited, session duration, and in-platform actions (such as games played, bets placed, and features accessed). This data is used for security monitoring, fraud prevention, and improving platform performance.
1.5 Communications Data
When you contact hejbaji's customer support team via live chat, email, or WhatsApp, we retain records of those communications — including the content of your messages and any attachments — for quality assurance, dispute resolution, and compliance purposes.
hejbaji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond what is contained in identity documents submitted for KYC), or health data. If you provide any such information voluntarily, for example in a support communication, it will be used solely to resolve your query and will not be profiled or retained beyond the support case.
1.6 Summary Table of Data Categories
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, NID number | Account registration, KYC verification, age check |
| Contact Data | Email address, mobile number | Account communication, security alerts, support |
| Financial Data | bKash / Nagad number, transaction history | Payment processing, fraud prevention, AML compliance |
| Technical Data | IP address, device info, session logs | Security monitoring, platform optimisation |
| Behavioural Data | Games played, bet amounts, session frequency | Responsible gaming monitoring, personalisation |
| Communications Data | Support chat transcripts, email threads | Dispute resolution, quality assurance, compliance |
2. How We Use Your Data
hejbaji processes personal data only where there is a lawful basis for doing so. The lawful bases we rely upon are: performance of a contract (operating your account and processing transactions), compliance with legal obligations (KYC, anti-money laundering, age verification), legitimate interests (fraud prevention, platform security, responsible gaming monitoring), and — where applicable — your explicit consent (for example, for optional marketing communications).
2.1 Core Platform Operations
We use your personal data to:
- Create, verify, and manage your hejbaji player account
- Process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card)
- Authenticate your identity when you log in and when you request withdrawals above threshold amounts
- Enforce our Terms & Conditions, including detecting and preventing duplicate accounts and bonus abuse
- Deliver customer support and resolve disputes or complaints
2.2 Legal & Regulatory Compliance
hejbaji is obligated to conduct identity verification and monitor transactions for signs of money laundering and other financial crime. We use your identity and financial data to fulfil these obligations. Transaction records and KYC documentation are retained for the periods mandated by applicable law, which may exceed the period of your active account.
2.3 Responsible Gaming Monitoring
hejbaji uses behavioural data — including session frequency, deposit patterns, game duration, and betting amounts — to identify players who may be exhibiting signs of problem gambling. Where our responsible gaming systems flag a concern, hejbaji's team may make contact with the player to offer support tools or to implement protective account restrictions. This processing is carried out in players' vital interests and in fulfilment of our responsible gaming commitments.
2.4 Marketing Communications
With your explicit opt-in consent, hejbaji may send you promotional communications by email or SMS about new games, bonuses, seasonal promotions (such as BPL and Eid offers), and platform updates. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting support or adjusting your account notification preferences. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
hejbaji will never use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight. If any automated process flags your account for review, a member of our compliance team will conduct a manual assessment before any account action is taken.
3. Data Sharing & Third Parties
hejbaji does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only with parties who are contractually obligated to protect it to the same standard we apply.
3.1 Payment Processing Partners
To process your deposits and withdrawals, hejbaji shares relevant transaction data with our payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and card payment gateways. These partners receive only the minimum information necessary to process the specific transaction and are bound by their own data protection obligations.
3.2 Game Providers
Games on the hejbaji platform are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games, technical session data — such as your player session token, game round identifier, and wager amounts — is transmitted to the relevant game provider. Game providers do not receive your full identity data or payment details.
3.3 Identity Verification Services
Where hejbaji uses a third-party KYC or identity verification service to process submitted identity documents, that service provider acts as a data processor on hejbaji's behalf under a strict data processing agreement. Document data is used solely for verification and is not retained by the verification provider beyond the completion of the verification process.
3.4 Legal & Regulatory Disclosure
hejbaji may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required to do so by applicable law, a binding court order, or an enforceable regulatory request. Where permissible, hejbaji will inform the affected player of such a disclosure.
3.5 Business Transfers
In the event that hejbaji undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by hejbaji may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any material change to how their data is processed as a result.
No Third-Party Advertising: hejbaji does not share your personal data with advertising networks, data brokers, or any other commercial third party for the purpose of targeting you with advertisements on other websites or platforms. Your data stays within the hejbaji ecosystem.
5. Data Security Measures
hejbaji implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal information against unauthorised access, accidental loss, destruction, or alteration.
5.1 Technical Safeguards
- TLS/SSL encryption: All data transmitted between your device and hejbaji's servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
- Password hashing: Account passwords are stored using a strong one-way hashing algorithm. hejbaji staff cannot view your password in plain text.
- Access controls: Sensitive personal data is accessible only to authorised personnel who require it to perform their job function. Access is logged and reviewed regularly.
- Firewalls and intrusion detection: hejbaji's infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for abnormal access patterns.
- Data segregation: Financial data, identity documents, and gameplay records are stored in logically separated systems to limit the impact of any potential security incident.
5.2 Operational Safeguards
hejbaji staff who handle personal data receive regular data protection training. Access to production data is restricted to a minimal set of authorised personnel. Third-party service providers who process data on our behalf are subject to contractual obligations requiring them to maintain security standards equivalent to or greater than those maintained by hejbaji.
5.3 Security Incident Response
In the event of a confirmed personal data breach that is likely to result in a risk to affected players, hejbaji will notify affected players promptly via their registered email address, setting out the nature of the breach, the data affected, and the remedial steps taken. hejbaji maintains an incident response plan that is reviewed and tested on a regular basis.
If you believe your hejbaji account has been accessed without your authorisation, please contact support immediately at [email protected]. Our security team operates around the clock and will act on credible security reports without delay.
6. Data Retention Policy
hejbaji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our Terms & Conditions. The following retention periods apply to the principal categories of data held by hejbaji.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account & Identity Data | Duration of active account + 5 years after closure | Legal compliance, dispute resolution, re-registration prevention |
| KYC Documents | 5 years from account closure or last transaction | Anti-money laundering regulatory obligations |
| Transaction Records | 7 years from transaction date | Financial record-keeping and AML compliance |
| Support Communications | 3 years from closure of support case | Dispute evidence, quality assurance |
| Gameplay & Betting Logs | 3 years from the date of each session | Responsible gaming monitoring, dispute resolution |
| Analytics Data | 12 months (anonymised at collection) | Platform performance analysis |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Evidence of consent basis for marketing communications |
Once the applicable retention period expires, hejbaji will securely delete or irreversibly anonymise the data in question. Where anonymisation is used rather than deletion, the anonymised data set cannot be re-linked to any individual and is retained solely for aggregate statistical analysis.
If you request deletion of your account, hejbaji will deactivate your account and suppress your personal data from active systems. However, certain categories of data (particularly KYC documents and transaction records) will be retained for the periods noted above to meet our legal obligations, even after you have requested account closure.
7. Your Privacy Rights
As a hejbaji player, you hold a set of rights with respect to the personal data we hold about you. hejbaji is committed to honouring these rights promptly and transparently. To exercise any of the rights below, please contact us at [email protected] with the subject line "Privacy Rights Request" and a description of your request.
7.1 Right of Access
You have the right to request a copy of the personal data hejbaji holds about you. Upon receipt of a verified access request, hejbaji will provide a summary of your data in a readable format within a reasonable timeframe. We may request proof of identity before fulfilling an access request to ensure we do not inadvertently disclose your data to an unauthorised party.
7.2 Right to Rectification
If any personal data hejbaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (such as a misspelled name), you may update your account details directly through your account profile page. For changes to core identity data (such as your NID number or date of birth), hejbaji will require supporting documentation before making the amendment.
7.3 Right to Erasure
You have the right to request that hejbaji delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and there is no other lawful basis for processing), or where the data has been unlawfully processed. As noted in Section 6 above, certain data categories must be retained to meet legal obligations and cannot be erased before the applicable retention period expires.
7.4 Right to Restrict Processing
You may request that hejbaji restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed. During a restriction period, hejbaji will store your data but will not actively process it for purposes other than storage and legal compliance.
7.5 Right to Data Portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you may transfer it to another service provider if you choose.
7.6 Right to Object
You have the right to object to hejbaji processing your personal data for direct marketing purposes at any time. Upon receipt of a valid marketing opt-out request, hejbaji will cease processing your data for marketing purposes immediately. You may also object to processing carried out on the basis of legitimate interests, in which case hejbaji will assess whether its legitimate interests are overridden by your interests or fundamental rights.
hejbaji aims to respond to all privacy rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, the response period may be extended by up to a further 60 days, with notification sent to you within the initial 30-day period explaining the reason for the extension.
8. Contact & Data Enquiries
If you have any questions, concerns, or requests regarding this Privacy Policy or the way hejbaji handles your personal data, please reach out to our support team using the contact details below. All privacy-related enquiries are handled with strict confidentiality.
8.1 General Support
For general account queries, payment issues, or responsible gaming support, contact hejbaji's customer support team:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24 hours a day, 7 days a week via the hejbaji platform
- WhatsApp: +880 1700 000000 (plain text — not a clickable link)
- Response time: hejbaji aims to acknowledge all enquiries within 24 hours (Bangladesh Standard Time, UTC+6)
8.2 Privacy-Specific Requests
For formal privacy rights requests — including access requests, erasure requests, or objections to processing — please email [email protected] with the subject line "Privacy Rights Request". Include your registered username and a description of your request. hejbaji will verify your identity before processing the request to ensure your data is not disclosed to an unauthorised party.
8.3 Policy Updates
hejbaji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. The effective date displayed at the top of this page will be updated each time a revision is made. Where changes are material, hejbaji will notify registered players by email prior to the changes taking effect. Continued use of the hejbaji platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.
This Privacy Policy was last reviewed and updated in January 2026. hejbaji recommends bookmarking this page and reviewing it periodically. If you do not agree with any revision to this Policy, you should cease use of the platform and contact support to close your account.
Your Data Is Safe — Now Enjoy the Games
With your privacy protected by industry-standard encryption and a clear data policy, you can focus on what matters — great cricket betting, premium slots, and live casino action on hejbaji.