Privacy Policy — How Heibaji Protects Your Data

Heibaji Privacy Policy

This privacy policy governs the collection and use of personal data by heibaji. By creating an account, using our platform, or interacting with any heibaji service, you consent to the practices described in this document. We take data protection seriously and have built our systems from the ground up with privacy in mind.

1 Information We Collect

When you register an account on heibaji, we collect certain personal information that is necessary to provide our services, comply with legal requirements, and protect both you and the platform. The types of data heibaji collects fall into three main categories:

Information You Provide Directly:

• Full name, date of birth, and gender as entered during the heibaji registration process.
• Email address and mobile phone number used for account verification and communication.
• Payment details including your bKash, Nagad, or Rocket account number when making deposits or requesting withdrawals on heibaji.
• Identity verification documents such as national ID card, passport, or driving licence when requested by the heibaji compliance team.
• Any messages, complaints, or feedback you submit to heibaji customer support.

Information Collected Automatically:

• Device information including device type, operating system, browser version, and screen resolution.
• IP address and approximate geographic location based on your connection to heibaji.
• Gaming activity data including games played, bet amounts, win/loss records, and session durations on heibaji.
• Login timestamps, page views, and navigation patterns within the heibaji platform.

Information from Third Parties:

• Payment confirmation data from bKash, Nagad, or Rocket when transactions are processed through heibaji.
• Fraud prevention data from security partners that help heibaji identify suspicious activity.

Data Type	Purpose	Retention Period
Name & Date of Birth	Identity verification, age verification	Account lifetime + 5 years
Email & Phone	Communication, 2FA, password resets	Account lifetime + 2 years
Payment Details	Processing deposits and withdrawals	Account lifetime + 7 years
Gaming Activity	Service improvement, responsible gaming	Account lifetime + 3 years
IP Address & Device	Security, fraud prevention	12 months rolling

2 How We Use Your Data

Heibaji uses your personal data only for specific, legitimate purposes. We do not collect data for the sake of collecting it. Every piece of information heibaji gathers serves a clear function:

• Account Management: To create, maintain, and secure your heibaji account. This includes verifying your identity, processing login requests, and enabling two-factor authentication.
• Payment Processing: To process your deposits via bKash, Nagad, and Rocket, and to send your winnings back to the correct account. Heibaji needs your payment details to ensure funds reach the right person.
• Platform Improvement: To analyse how players use heibaji so we can improve game selection, fix bugs, optimise load times, and enhance the overall user experience.
• Responsible Gaming: To monitor betting patterns and identify signs of problem gambling. Heibaji uses this data to trigger responsible gaming alerts, enforce self-exclusion requests, and protect vulnerable players.
• Legal Compliance: To meet regulatory obligations including anti-money laundering checks, identity verification requirements, and record-keeping mandates that apply to gaming platforms like heibaji.
• Communication: To send you important account notifications, security alerts, and — only if you have opted in — promotional offers about new games and bonuses on heibaji.

3 Data Storage and Security

Heibaji employs multiple layers of security to protect your personal information from unauthorised access, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and heibaji servers. This is the same encryption standard used by major banks worldwide.
• Encrypted database storage where sensitive personal information is encrypted at rest using AES-256 encryption algorithms.
• Strict access controls ensuring that only authorised heibaji personnel with a legitimate business need can access player data. All access is logged and audited.
• Regular security audits and penetration testing conducted by independent cybersecurity firms to identify and fix vulnerabilities before they can be exploited.
• Automated threat detection systems that monitor heibaji infrastructure 24 hours a day for suspicious activity or potential breaches.

Despite these measures, no system connected to the internet can guarantee absolute security. Heibaji strongly recommends that players use strong, unique passwords, enable two-factor authentication, and never share their login credentials with anyone.

4 Cookies and Tracking Technologies

Heibaji uses cookies and similar technologies to enhance your experience on the platform. Cookies are small text files stored on your device that help heibaji remember your preferences and understand how you interact with the site. Here is what heibaji uses:

• Essential Cookies: Required for heibaji to function properly. These handle login sessions, security tokens, and load balancing. You cannot opt out of these without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and recently played games on heibaji. These make your experience smoother and more personalised.
• Analytics Cookies: Help heibaji understand aggregate usage patterns — which pages are most visited, where users drop off, and which games are most popular. This data is anonymised and used solely for platform improvement.

Heibaji does not use advertising or third-party tracking cookies. We do not track your activity across other websites. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect your ability to use heibaji properly.

5 Third-Party Data Sharing

Heibaji does not sell, rent, or trade your personal information to any third party for marketing purposes. However, there are limited circumstances where heibaji may share certain data with trusted partners:

• Payment Processors: When you make a deposit or withdrawal on heibaji, necessary transaction details are shared with bKash, Nagad, or Rocket to process the payment.
• Identity Verification Services: Heibaji may share your ID documents with licensed verification providers to confirm your identity and comply with anti-money laundering regulations.
• Legal Authorities: If required by law, court order, or regulatory investigation, heibaji may be obligated to share specific player data with relevant authorities.
• Security Partners: Heibaji works with fraud prevention services that help identify suspicious transactions, bot activity, and account compromise attempts.

All third parties that process data on behalf of heibaji are contractually required to maintain the same level of data protection that we provide. They are prohibited from using your data for any purpose other than the specific service they provide to heibaji.

6 Your Data Rights

As a heibaji player, you have specific rights regarding your personal data. We respect these rights and will honour all legitimate requests promptly:

• Right to Access: You can request a copy of all personal data that heibaji holds about you. We will provide this within 30 days of receiving your request.
• Right to Correction: If any information heibaji holds about you is inaccurate or incomplete, you have the right to request correction. You can update most details directly in your account settings.
• Right to Deletion: You can request that heibaji delete your personal data. Please note that we may need to retain certain information for legal compliance purposes even after your account is closed.
• Right to Restrict Processing: You can ask heibaji to limit how we use your data in certain circumstances, such as when you dispute the accuracy of information we hold.
• Right to Data Portability: You can request that heibaji provide your data in a commonly used, machine-readable format so you can transfer it elsewhere.
• Right to Opt Out: You can opt out of promotional communications from heibaji at any time by clicking the unsubscribe link in any marketing email or contacting support.

To exercise any of these rights, contact the heibaji data protection team at [email protected]. We will verify your identity before processing any request to ensure that your data is not released to unauthorised individuals.

7 Data Retention

Heibaji retains your personal data only for as long as necessary to fulfil the purposes described in this privacy policy or as required by applicable law. When your data is no longer needed, heibaji will securely delete or anonymise it so that it can no longer be linked back to you. If you close your heibaji account, we will retain certain records for a minimum of 5 years to comply with anti-money laundering regulations and to resolve any potential disputes.

8 Children's Privacy

Heibaji services are strictly limited to individuals who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If heibaji discovers that we have inadvertently collected data from a minor, we will immediately delete all associated information and terminate the account. If you believe a minor has created an account on heibaji, please contact us immediately at [email protected].

9 Changes to This Privacy Policy

Heibaji may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or platform features. When material changes are made, heibaji will notify registered players via email and display a prominent notice on the platform at least 14 days before the changes take effect. We encourage you to review this page periodically. The "Effective" date at the top of this page indicates when the policy was last revised. Your continued use of heibaji after any changes constitutes acceptance of the updated privacy policy.

10 Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or how heibaji handles your personal data, please reach out to our dedicated data protection team:

Email: [email protected]

We aim to respond to all privacy-related enquiries within 48 hours. For formal data access or deletion requests, heibaji will respond within 30 calendar days.