heybeji Privacy Policy

Data We Collect

heybeji collects personal data that is necessary for the proper operation of the platform, fulfilment of our legal obligations, and delivery of a safe and personalised gaming experience. We follow a data minimisation principle — we only collect what we actually need, and nothing more. The categories of personal data we collect are set out below.

We collect personal data through the following channels: directly from you when you register an account, make a deposit or withdrawal, contact our support team, or respond to a survey; automatically when you use the platform via cookies and server logs; and from third-party payment providers such as bKash, Nagad, and Rocket when you initiate financial transactions.

How We Use Your Data

heybeji uses the personal data we collect for specific, lawful purposes only. We do not use your data in ways that are incompatible with the purpose for which it was collected. The primary purposes for which we process your personal data are as follows:

• Account management: To create, maintain, and manage your heybeji player account, including processing your registration, verifying your identity and age, and managing your account settings and preferences.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Financial data is shared with payment providers only to the extent necessary to complete transactions.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money-laundering (AML) rules, Know Your Customer (KYC) requirements, and responsible gaming regulations. This includes verifying player age (18+), monitoring for suspicious financial activity, and maintaining legally required records.
• Platform security and fraud prevention: To detect, investigate, and prevent fraud, cheating, money laundering, unauthorised account access, and other prohibited conduct. Technical data including IP addresses and device identifiers is used for this purpose.
• Responsible gaming: To monitor player behaviour for signs of problem gambling — such as unusually long sessions, rapid loss patterns, or repeated deposit attempts after large losses — and to enable our responsible gaming tools including deposit limits, session timers, and self-exclusion.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance through our live chat and email support channels.
• Service improvement: To analyse aggregated usage data in order to improve the platform's functionality, game offering, payment experience, and user interface. This analysis is conducted on anonymised or pseudonymised data wherever possible.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant updates — but only where you have given explicit consent to receive marketing communications. You may withdraw marketing consent at any time by emailing [email protected] or using the unsubscribe link in any marketing email.

heybeji will never use your personal data for automated decision-making that produces significant legal effects without human oversight. Where automated systems flag an account for fraud review or responsible gaming intervention, a member of our compliance team will review the case manually before any account action is taken.

Cookies & Tracking

heybeji uses cookies and similar tracking technologies to operate the platform effectively, keep your session secure, and understand how players use the site so we can continue improving it. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

heybeji does not use third-party advertising cookies or behavioural targeting cookies. We do not share cookie data with advertising networks or social media platforms. The analytics cookies we use collect only anonymised, aggregated data and cannot be used to identify you personally.

You may configure your browser to refuse or delete cookies at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging into your heybeji account and using core platform features. Disabling functional cookies may mean your preferences are not saved between sessions. Disabling performance cookies does not affect platform functionality.

Data Sharing & Disclosure

heybeji does not sell, rent, or trade your personal data to any third party. We share personal data only in the specific, limited circumstances described below, and only to the minimum extent necessary for each purpose.

• Payment service providers: We share financial data — including your mobile wallet number or bank account details — with payment processors such as bKash, Nagad, Rocket, Upay, and our banking partners, solely to process deposits and withdrawals you have initiated. These providers are bound by their own data protection obligations and may not use your data for any other purpose.
• Game content providers: When you play a game on heybeji, your game session is served by a third-party game studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi. A unique player session token — which does not contain your name, email, or financial details — is passed to the game provider to initialise your session. Game providers do not receive your personal identity data.
• Identity verification partners: Where we use a third-party KYC service to verify identity documents, your submitted documents may be processed by that service. All KYC partners used by heybeji operate under strict data processing agreements and are prohibited from using your data for any purpose other than identity verification.
• Fraud prevention and security services: We may share technical data such as IP addresses, device fingerprints, and transaction metadata with fraud prevention services to protect the platform and its players from fraudulent activity.
• Legal authorities: heybeji is obligated to disclose personal data to government authorities, law enforcement agencies, or financial regulators when required to do so by applicable law, court order, or official regulatory request. We will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of heybeji's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy policy applicable to your data following the transfer.

All third parties with whom heybeji shares personal data are required to process that data in accordance with applicable data protection standards and are prohibited from using it for purposes beyond those specified in our data processing agreements with them.

Data Security

heybeji takes the security of your personal data seriously. We implement a comprehensive set of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• Transport Layer Security: All data transmitted between your device and heybeji's servers is encrypted using 256-bit SSL/TLS encryption. This includes account login, financial transactions, and any personal information submitted via forms on the platform.
• Encryption at rest: Sensitive personal data stored on heybeji's servers — including identity documents, financial records, and contact information — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within heybeji is restricted to staff members who have a legitimate operational need to access that data. All staff with data access are subject to background checks, data protection training, and strict access control policies.
• Password hashing: Your account password is never stored in plain text. Passwords are hashed using industry-standard one-way cryptographic hashing algorithms. Even heybeji staff members cannot see your password.
• Fraud detection systems: heybeji operates real-time transaction monitoring and behavioural analytics systems to detect and respond to security threats, suspicious login attempts, and fraudulent account activity.
• Regular security audits: The heybeji platform undergoes regular internal security reviews and periodic third-party penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Data breach response: In the event of a data breach that poses a risk to your rights and freedoms, heybeji will notify affected players by email within 72 hours of becoming aware of the breach, and will take immediate steps to contain and remediate the incident.

While heybeji implements robust security measures, no internet-based platform can guarantee absolute security. You also have a role to play in protecting your account: use a strong, unique password; enable any two-factor authentication options available on your account; and contact [email protected] immediately if you suspect unauthorised access to your account.

Data Retention

heybeji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes that may arise. The retention periods applicable to each category of personal data are summarised below.

Once the applicable retention period has expired, heybeji will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it can no longer identify any individual player.

If you request deletion of your account and personal data, heybeji will action the request promptly. However, where we are legally required to retain certain records — particularly financial transaction records and KYC documents — we will retain those specific records for the minimum legally required period before deletion, and will not use them for any other purpose during that time.

Your Privacy Rights

As a heybeji player, you hold meaningful rights over your personal data. heybeji is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights below, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your request.

• Right to access: You have the right to request a copy of all personal data heybeji holds about you. We will provide this in a clear, readable format within 30 days of your verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Basic account details such as your email address and mobile number can be updated directly from your account settings page.
• Right to erasure ("right to be forgotten"): You may request that heybeji delete your personal data. We will honour this request except where we are legally obligated to retain specific records for compliance purposes, as described in the Data Retention section above.
• Right to data portability: You have the right to receive a machine-readable export of the personal data you have provided to heybeji directly (such as account registration data and transaction history), so that you may transfer it to another service provider.
• Right to restrict processing: In certain circumstances — such as while a dispute about the accuracy of your data is being resolved — you may request that heybeji restrict the processing of your personal data to storage only, without further active processing.
• Right to object to marketing: You have the absolute right to object to heybeji processing your personal data for direct marketing purposes at any time. Once you object, we will stop sending marketing communications to you immediately.
• Right to withdraw consent: Where heybeji processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way heybeji handles your personal data, please contact our support team. We take all privacy enquiries seriously and aim to respond within 30 days.

You can reach us by email at: [email protected] — please use the subject line "Privacy Enquiry" for all privacy-related communications. Our support team is available 24 hours a day, 7 days a week, 365 days a year.

If you are not satisfied with heybeji's response to a privacy complaint, or if you believe we are processing your personal data unlawfully, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. heybeji will cooperate fully with any such investigation.

This Privacy Policy was last updated on 1 January 2026. It applies to all personal data collected by heybeji from players based in Bangladesh and to all products and services offered through the heybeji platform, including live casino games, cricket and sports betting, slot games, crash games, and bonus promotions.