heybji Privacy Policy
At heybji, your privacy is a core commitment, not an afterthought. This Privacy Policy explains exactly what personal data we collect when you use our online casino and sports betting platform, how that data is used, who it may be shared with, and what rights you hold over your own information.
All data transmitted between your browser and heybji's servers is protected by industry-standard TLS/SSL encryption. Your credentials and payment details are never sent in plain text.
heybji does not sell, rent, or trade your personal information to third-party marketers. Your data is used solely to operate and improve the heybji platform and to meet legal obligations.
You have the right to access, correct, export, or request deletion of your personal data at any time. heybji processes all such requests promptly and transparently.
Personal data is stored on access-controlled, encrypted servers. Only authorised heybji personnel with a legitimate operational need may access your account records.
heybji uses cookies strictly for session management, fraud prevention, and platform analytics. We do not use third-party advertising cookies or cross-site behavioural tracking.
Identity documents submitted for KYC verification are reviewed by authorised compliance staff only and are never shared with third parties beyond legally required verification partners.
Data We Collect
When you register for and use a heybji account, we collect personal data that is necessary to provide you with a safe, compliant, and functional online gaming experience. We collect only the data we genuinely need — we do not gather information speculatively or for purposes unrelated to operating the heybji platform.
Categories of Personal Data
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, National ID or passport number | At registration and during KYC verification |
| Contact Data | Email address, mobile phone number, residential address | At registration and when updating account details |
| Financial Data | bKash/Nagad/Rocket wallet numbers, bank account details, transaction history, deposit and withdrawal amounts in BDT | When making deposits or requesting withdrawals |
| Technical Data | IP address, browser type and version, device type, operating system, session timestamps, time zone (Bangladesh Standard Time) | Automatically upon each platform visit |
| Usage Data | Pages visited, games played, bets placed, wagering history, bonus usage, session duration | Continuously during platform use |
| Communications Data | Live chat transcripts, support emails, complaint records | When you contact heybji support |
| Verification Documents | Scanned copies or photographs of government-issued ID, proof of address documents, payment method ownership evidence | During KYC review, typically prior to first withdrawal |
Data We Do Not Collect
heybji does not collect biometric data, facial recognition data, or any sensitive data categories such as religious beliefs, political opinions, or health records. We do not collect data from social media profiles unless you explicitly provide such information in a support communication.
How We Use Your Data
heybji processes your personal data on the basis of one or more lawful grounds: the performance of your account contract with us, compliance with legal obligations, our legitimate interests in operating a secure and commercially viable platform, or — where required — your explicit consent. The table below maps each processing activity to its lawful basis.
- Account creation and management: Processing your registration data to create and maintain your heybji account, verify your identity, and enable login access.
- Payment processing: Using your financial data to process deposits via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard, and to execute withdrawal requests to your verified payment method.
- Fraud prevention and security: Analysing technical and usage data to detect suspicious activity, prevent multi-accounting, identify bonus abuse, and protect the integrity of the heybji platform for all players.
- Legal and regulatory compliance: Retaining transaction records, KYC documents, and communications data for the periods required by applicable anti-money laundering, financial crime, and data protection obligations.
- Responsible Gaming monitoring: Using gameplay and usage data to identify patterns consistent with problem gambling behaviour, enabling our support team to reach out with relevant resources and self-exclusion options.
- Customer support: Using your contact and communications data to respond to enquiries, investigate disputes, and resolve complaints raised via live chat or email.
- Platform improvement and analytics: Using aggregated, anonymised usage data to understand how players interact with heybji, prioritise feature development, and improve game lobby performance.
- Promotional communications: Where you have opted in to marketing communications, sending you relevant bonus offers, tournament announcements, and seasonal promotions by email or SMS. You may opt out at any time by contacting support at [email protected].
Data Sharing & Disclosure
heybji does not sell your personal data. We share personal data only with trusted third parties whose involvement is strictly necessary to deliver the heybji service, and only to the extent required for that specific purpose. All third-party partners who process personal data on heybji's behalf are contractually required to maintain appropriate security standards and to use your data only for the stated purpose.
Categories of Third-Party Recipients
- Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
- Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and anonymised player identifier to deliver game content. They do not receive your full name, contact details, or financial data.
- Identity verification services: Third-party KYC partners may receive copies of your identity documents to perform age and identity checks. These partners are contractually bound to process documents solely for verification purposes and to delete them once the check is complete.
- IT infrastructure and hosting providers: Cloud hosting and server infrastructure providers that store heybji's databases and application code may have incidental access to data as part of their managed service. Such providers operate under strict data processing agreements.
- Fraud and security analytics: Specialist fraud detection service providers may receive technical and usage data to support heybji's anti-fraud and anti-money-laundering monitoring obligations.
- Legal and regulatory authorities: heybji will disclose personal data to law enforcement agencies, courts, or financial intelligence units where required to do so by applicable law, a valid court order, or a regulatory obligation. heybji will notify you of any such disclosure unless doing so is itself prohibited by law.
Cookies & Tracking
heybji uses cookies and similar browser storage technologies to enable core platform functionality, maintain your login session, and gather anonymised analytics data. We do not use advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies.
Types of Cookies Used
- Strictly necessary cookies: Required for the platform to function. These include your session authentication token, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core functionality such as login and gameplay.
- Functional cookies: Store your preferences such as language setting, currency display, and responsible gaming tool configuration (e.g., session time reminders). Disabling these cookies means your preferences will not persist between sessions.
- Analytics cookies: Anonymised first-party cookies that track aggregate page view counts, navigation paths, and feature engagement to help heybji improve the platform experience. No personally identifiable data is included in analytics cookie payloads.
- Security and fraud prevention cookies: Used to detect unusual access patterns, potential bot activity, and account takeover attempts. These cookies are a component of heybji's commitment to maintaining a secure environment for all players.
Managing Your Cookie Preferences
You may manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies selectively, clear existing cookies, and receive notifications before a new cookie is stored. Please note that disabling strictly necessary cookies will prevent you from logging in or using heybji's real-money gaming features. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.
heybji does not use any third-party advertising network cookies (such as Google Ads remarketing tags, Meta Pixel, or similar tools) on the heybji.com domain. If you encounter a third-party cookie while using heybji, please report it to our support team immediately so we can investigate.
Data Retention
heybji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide.
- Account registration data (name, contact details, date of birth): Retained for the duration of your active account plus 5 years following account closure, to satisfy anti-money laundering record-keeping requirements.
- Financial transaction records (deposit and withdrawal history, amounts in BDT): Retained for 7 years from the date of each transaction in accordance with financial compliance obligations.
- KYC documents (identity and address verification files): Retained for 5 years following account closure or the completion of the relevant verification check, whichever is later.
- Customer support communications (live chat transcripts, emails, complaint records): Retained for 3 years from the date of the communication unless the record forms part of an ongoing dispute or legal matter.
- Technical and usage logs (IP addresses, session data, gameplay logs): Retained for 13 months from the date of collection for analytics and fraud review purposes, then deleted or anonymised.
- Marketing consent records: Retained for the duration of your subscription to marketing communications plus 2 years, to demonstrate compliance with consent requirements.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. If you request deletion of your data before the retention period has elapsed, heybji will delete all data that is not subject to a legal retention obligation and will confirm the categories of data that must be retained and the legal basis for doing so.
Data Security
heybji implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Security is treated as an ongoing programme, not a one-time implementation.
- Transport Layer Security (TLS): All data in transit between your device and heybji's servers is encrypted using TLS 1.2 or higher. The heybji.com domain enforces HTTPS on all pages — unencrypted HTTP connections are automatically redirected.
- Encryption at rest: Sensitive data fields, including payment method identifiers and identity document references, are stored in encrypted form within heybji's databases. Encryption keys are managed separately from the encrypted data.
- Access controls: Access to heybji's production systems and player data is restricted to authorised personnel on a least-privilege basis. Access is logged, reviewed, and revoked promptly when staff roles change.
- Password security: Account passwords are stored as salted cryptographic hashes. heybji never stores passwords in plain text and cannot retrieve your password — only reset it.
- Intrusion detection and monitoring: heybji's infrastructure is continuously monitored for anomalous activity, intrusion attempts, and data exfiltration indicators using automated security tooling and periodic manual review.
- Incident response: In the event of a confirmed personal data breach that poses a risk to affected individuals, heybji will notify impacted players without undue delay and will take immediate remedial action to contain the breach.
Your Privacy Rights
As a heybji account holder, you hold a meaningful set of rights over your personal data. heybji is committed to honouring these rights promptly and without imposing unnecessary barriers. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a valid request.
Request a copy of the personal data heybji holds about you, including the categories of data, its sources, and how it is used.
Request correction of any inaccurate or incomplete personal data in your heybji account. You may also update some details directly via your account profile.
Request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
Request that heybji limits the use of your data while a dispute about its accuracy or the lawfulness of its processing is being resolved.
Request your personal data in a structured, machine-readable format so that you can transfer it to another service provider of your choice.
Object to processing based on heybji's legitimate interests, including direct marketing. Marketing objections are actioned immediately upon receipt.
heybji will not charge a fee for handling privacy rights requests unless the request is manifestly unfounded or excessive in scope, in which case a reasonable administrative fee may apply. We may ask you to verify your identity before processing a request to protect your data from being disclosed or altered in response to a fraudulent request.
Contact & DPO Details
If you have any questions about this Privacy Policy, wish to exercise a privacy right, or want to raise a concern about how heybji handles your personal data, please contact our support and data protection team using the details below. All privacy-related communications are handled in English.
General Support
For account-related enquiries, general support, and day-to-day privacy questions, our support team is available 24 hours a day, 7 days a week via live chat on the heybji platform or by email. Average response time via live chat is 2–5 minutes.
Email: [email protected]
Data Protection Enquiries
For formal privacy rights requests, data breach notifications, or data protection complaints, please send a written request to the heybji data protection team with the subject line "Privacy Rights Request" or "Data Protection Complaint" as applicable.
Data Protection Email: [email protected]
heybji will acknowledge receipt of your request within 5 business days and will provide a substantive response within 30 calendar days. In cases of particular complexity, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.
Policy Updates
heybji may update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, registered players will be notified via email to the address on file with their account. The updated policy will be published on this page with a revised "Effective" date. Continued use of the heybji platform following notification of a material change constitutes acceptance of the revised Privacy Policy.
Questions or Ready to Play?
Review our FAQ for quick answers, explore the casino, or contact our support team if you have privacy concerns.
18+ Only — Gamble Responsibly