Heibaji Privacy Policy

This Privacy Policy explains how heibaji collects, uses, stores, and protects the personal data of players who use the heibaji platform. It applies to all users of the heibaji website, mobile app, and any related services. By registering an account or using the heibaji platform, you confirm that you have read and understood this Privacy Policy.

Heibaji is committed to handling your personal data responsibly. We collect only what we need, we use it only for the purposes described in this policy, and we take reasonable steps to keep it secure. If you have questions about how your data is handled, you can contact us at any time using the details at the end of this policy.

This policy may be updated from time to time. When changes are made, the revised version will be published on this page with an updated "Last Updated" date. We encourage you to review this policy periodically so you are always aware of how heibaji handles your information.

Heibaji collects personal data in several ways — directly from you when you register or use the platform, automatically through your use of the site, and from third-party services such as payment providers. Below is a summary of the categories of data we collect and why.

Heibaji uses the personal data we collect for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The main ways we use your data are described below.

• Account Management: To create and maintain your heibaji account, verify your identity, and manage your account settings and preferences.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate financial records for your account.
• Customer Support: To respond to your queries, resolve disputes, and provide assistance when you contact the heibaji support team.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct.
• Regulatory Compliance: To meet our obligations under applicable laws and regulations, including age verification and anti-money laundering requirements.
• Responsible Gaming: To monitor gaming activity and identify patterns that may indicate problem gambling, and to apply responsible gaming tools where appropriate.
• Platform Improvement: To analyse how players use the heibaji platform and to improve the quality, performance, and features of our service.
• Marketing Communications: To send you promotional offers and updates, but only if you have opted in to receive them. You can opt out at any time.

Heibaji processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contractual Necessity: Processing that is necessary to fulfil our contract with you — for example, processing your deposits and withdrawals, or managing your account.
• Legal Obligation: Processing that is required to comply with applicable laws and regulations — for example, age verification and anti-money laundering checks.
• Legitimate Interests: Processing that is necessary for heibaji's legitimate business interests — for example, fraud prevention, platform security, and service improvement — provided those interests are not overridden by your rights.
• Consent: Processing that is based on your explicit consent — for example, sending you marketing communications. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Heibaji does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

• Payment Providers: We share necessary transaction data with bKash, Nagad, and Rocket to process your deposits and withdrawals. These providers have their own privacy policies governing how they handle your data.
• Identity Verification Services: We may share identity documents with third-party KYC verification providers to confirm your identity and age as required by our compliance obligations.
• Fraud Prevention Services: We may share technical and usage data with fraud detection services to identify and prevent fraudulent activity on the platform.
• Legal and Regulatory Authorities: We may disclose your data to law enforcement, regulatory bodies, or other authorities where required by law or where we believe disclosure is necessary to protect the rights, property, or safety of heibaji, our players, or others.
• Service Providers: We may share data with trusted third-party service providers who assist us in operating the platform — for example, hosting providers and analytics services. These providers are contractually required to handle your data securely and only for the purposes we specify.

Heibaji uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the site is used. Cookies are small text files stored on your device when you visit the heibaji website.

The types of cookies heibaji uses include:

• Essential Cookies: Required for the platform to function correctly. These include session cookies that keep you logged in and security cookies that help protect your account. These cannot be disabled.
• Functional Cookies: Used to remember your preferences and settings, such as your preferred language or display options.
• Analytics Cookies: Used to collect anonymised data about how players use the heibaji platform, helping us identify areas for improvement. This data does not identify you personally.
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious device behaviour.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the heibaji platform. Essential cookies cannot be disabled as they are required for the site to operate.

Heibaji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods depend on the type of data and the purpose for which it is held.

• Account Data: Retained for the duration of your account and for a period after account closure as required by regulatory obligations.
• Financial Records: Transaction records are retained for a minimum period as required by applicable financial regulations.
• KYC Documents: Identity verification documents are retained for the period required by anti-money laundering regulations.
• Support Communications: Chat logs and email correspondence are retained for a reasonable period to support dispute resolution and quality assurance.
• Technical and Usage Data: Retained in anonymised or aggregated form for platform analytics and improvement purposes.

When data is no longer required, heibaji will securely delete or anonymise it. If you request deletion of your account, heibaji will process the request subject to any legal obligations that require us to retain certain data for a specified period.

As a heibaji player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the heibaji support team using the details at the end of this policy.

Heibaji takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest on heibaji's servers.
• Strict access controls ensuring that only authorised personnel can access personal data.
• Regular security assessments and vulnerability testing of the heibaji platform.
• Staff training on data protection and security best practices.
• Incident response procedures to detect, report, and address data security breaches promptly.

While heibaji takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password, do not share your login credentials, and contact support immediately if you suspect your account has been compromised.

The heibaji platform is strictly for adults aged 18 and over. Heibaji does not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has registered an account or provided personal data, we will close the account immediately and delete the associated data as quickly as possible.

If you believe that a minor has registered on heibaji or that we have inadvertently collected data from a child, please contact us immediately at [email protected] so we can take prompt action.

Heibaji may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For significant changes that materially affect how we handle your personal data, heibaji will notify registered players via email or an in-platform notification before the changes take effect. We encourage you to review this policy periodically. Continued use of the heibaji platform after an updated policy has been published constitutes your acceptance of the changes.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how heibaji handles your personal data, please get in touch with us. Our support team is available 24 hours a day, 7 days a week.

You can reach us via live chat on the heibaji platform, or by email at [email protected]. We aim to respond to all privacy-related enquiries within 30 days. For urgent matters, live chat is the fastest way to reach us.