Data Protection Policy

Hyebaji's Privacy Policy —
Your Data Is Safe With Us

Hyebaji believes that protecting each player's personal information is our foremost responsibility. This Privacy Policy explains in plain terms — what data we collect, how we use it, and how we keep it secure.

Last updated: January 2026 SSL Encryption Protected GDPR Compliance

Our Our Privacy Commitment

Six Core Principles of Hyebaji's Privacy Policy

Transparency in data collection

We are transparent about exactly what data Hyebaji collects. Hidden data collection and vague policies have no place here. You will always know what information we hold about you.

Maximum encryption

All data transfers are protected via SSL/TLS encryption. Stored data is also kept in encrypted form, making unauthorized access virtually impossible.

Never sold to third parties

Hyebaji never sells your personal information to third parties. Data is shared with authorities only when required by law — never otherwise.

Your Control

You have the right to request access to, correction of, or deletion of your data. Hyebaji respects those requests and responds promptly.

Cookie Policy — Clear

Hyebaji uses only necessary cookies. Advertising tracking cookies are kept to a minimum, and you can reject cookies at any time.

Regular policy review

We review this Privacy Policy regularly and will notify you in advance of any changes. The date of the latest update is always displayed at the top of the page.

1. Introduction & Scope

Hyebaji is a trusted online gaming platform built for Bangladeshi players. This Privacy Policy ("Policy") explains how Hyebaji collects, uses, stores, and protects your personal information.

By using Hyebaji's website, mobile app, or any of our services, you are considered to have accepted this Privacy Policy. Please read it in full before you start using the platform.

We believe data protection is a fundamental right. That is why Hyebaji consistently follows international data protection standards — so you can enjoy gaming without worry. Our Privacy Policy is aligned with GDPR guidelines and complies with applicable laws in Bangladesh.

In plain terms: Hyebaji uses your information solely to operate its services. We do not sell it, collect it covertly, or use it for anything beyond what is necessary without your consent.

2. What information we collect

Hyebaji collects only the information that is necessary — what is needed to deliver the service properly and keep your account secure, nothing more. Full details are provided below.

Information collected at registration

  • Full name (as per national ID)
  • Mobile number or email address
  • Date of birth (for age verification)
  • Password (stored in encrypted form)
  • Current address (optional, at KYC stage)

Information Collected During KYC Verification

  • Copy of national ID or passport
  • Selfie or photo ID (if required)
  • Bank account or mobile banking number

Information collected automatically during use

  • IP Address & Device Information
  • Browser type and operating system
  • Page visits and click patterns (Analytics)
  • Login time and session information
  • Game history and transaction records

Hyebaji never stores your full bank card number or CVV. Payment details go directly to the payment processor and are never visible to Hyebaji.

3. How we use your information

Hyebaji uses your information only for specific, legitimate, and transparent purposes. Each purpose is explained below.

Purpose of Use What data is used Legal Basis
Account Creation & Management Name, email/mobile number, password Contractual obligations
KYC Identity Verification Identity document, photo, address Legal Obligations
Deposit and withdrawal process Bank / Mobile Banking details Contractual obligations
Customer Support Name, contact details, transaction history Legitimate interest
Fraud prevention IP address, device information, game history Legitimate interest and legal obligations
Promotional offers (with consent) Email, mobile number, game preferences Your Consent
Service improvement & Analytics Usage patterns, click data Legitimate interest

Hyebaji does not use your information for any purpose beyond those listed above. If a new purpose arises in the future, you will be informed in advance and your consent will be obtained where required.

4. Data sharing & disclosure policy

Hyebaji never sells your personal information. However, in certain limited circumstances, we may share specific data with trusted third parties. Those circumstances are clearly outlined below.

  • Payment processor: Payment gateways receive only the information necessary to process transactions — nothing more.
  • KYC Verification Services: Licensed third parties may be used for identity verification — strictly under confidentiality agreements.
  • Legal Authorities: Data may be disclosed to comply with Bangladeshi or international law, or pursuant to a court order.
  • Fraud prevention agencies: Data may be shared with regulatory authorities to prevent cybercrime or money laundering.
  • Game Provider: Live Casino or slots game software providers may receive limited data solely for the purpose of operating the games.

What will never happen: Hyebaji never sells or transfers your information to advertising agencies, data brokers, or any third party for commercial purposes — under any circumstances.

5. Technical measures for data security

Hyebaji upholds the highest industry standards for data protection. Multiple layers of security ensure your data remains protected at all times.

  • SSL/TLS Encryption: All data transfers are secured with 256-bit SSL encryption — bank-grade security.
  • Password hashing: Your password is stored as a bcrypt hash; Hyebaji never has visibility into your actual password.
  • Two-Factor Authentication (2FA): 2FA is available to add an extra layer of security to your account.
  • Firewall and DDoS protection: Advanced server-level firewalls and DDoS mitigation systems are active at all times.
  • Regular security audits: Third-party cybersecurity experts conduct regular audits of Hyebaji's systems.
  • Access Controls: Only authorized staff can access specific data, and all access is logged.

In the event of any suspicious activity or data breach, Hyebaji will notify affected players within 72 hours and take prompt steps to resolve the issue.

6. Cookies & tracking technologies

Hyebaji uses cookies and similar technologies to enhance your browsing experience and keep the platform running smoothly. Cookies are small data files stored in your browser.

Types of Cookies We Use

  • Essential Cookies: For login sessions, security tokens, and language preferences — the site cannot function properly without these.
  • Performance cookies: Used to identify page load times and errors — fully anonymous.
  • Functionality cookies: To remember your preferences, such as language or theme settings.
  • Analytics Cookies: To analyze how the site is used — these are subject to your consent.

You can disable cookies at any time through your browser settings. Please note that disabling essential cookies may cause certain features of the site to stop working.

7. Your data rights

Hyebaji believes every player has the right to control their own data. In accordance with GDPR and international standards, you hold the following rights.

Right of Access

You can find out at any time what information Hyebaji holds about you. Submit a request to our support team and we will provide a full data report within 30 days.

Right to rectification

If any of your information is inaccurate, you may request a correction. Hyebaji will action that correction without delay.

Right to deletion

In certain circumstances, you may request that your data be deleted. However, some data may need to be retained for a specified period due to legal obligations.

Right to restrict processing

You can ask us to stop using your data for specific purposes at any time — for example, by opting out of marketing communications.

Right to data portability

You may request your data in a structured, machine-readable format — making it easy to transfer to another service if needed.

Right to Object

You may object to the processing of your data in certain circumstances, and Hyebaji will give such objections serious consideration.

To exercise any of your rights, contact us at our support email ([email protected]) to reach us. We typically respond within 7 business days.

8. Data retention periods

Hyebaji does not retain data longer than necessary. Retention periods for each data type are outlined below.

Type of data Retention period Reason
Account Information For the duration of the active account + 5 years Legal Obligations
Transaction records 7 years Financial regulatory requirement
KYC Documents 5 years after account closure AML Policy
Game History 3 years Dispute resolution
Support conversations 2 years Service quality improvement
Analytics Data 1 year (anonymized) Site improvement
Marketing consent Until consent is withdrawn Your Preferences

Upon expiry, data is automatically deleted or anonymized securely.

9. Privacy of minors

Hyebaji strictly does not serve anyone under the age of 18. We do not knowingly collect information from minors.

  • Date of birth is verified at registration, and users under 18 will not be permitted to register.
  • If any minor's data is collected by mistake, it will be deleted as soon as we become aware of it.
  • If a parent or guardian suspects their child is using Hyebaji, please contact our support team immediately — we will act promptly.

Hyebaji's services are for adults aged 18 and above only. Any account found to belong to a minor will be closed immediately.

10. Changes to the Privacy Policy

Hyebaji may update this Privacy Policy when necessary. We will notify you before any significant changes take effect.

  • You will be notified in advance of any changes via email or in-app notification.
  • The date of the latest update will always be shown at the top of this page.
  • Continued use of our services after a new policy is published will be considered acceptance of the updated terms.
  • If you object to any changes, please contact support before closing your account.

11. Contact & Complaints

For any privacy-related questions, requests, or complaints, please contact Hyebaji's Data Privacy Team.

Support email:
Response time: Usually within 24–48 hours

  • Submit requests to access or delete your data via email.
  • For complaints, please write to us with full details — we will investigate as quickly as possible.
  • If you are not satisfied with Hyebaji's response, you may file a complaint with the relevant regulatory authority.

Play safely, Join Hyebaji

Hyebaji is fully committed to your privacy and data security. Join now and enjoy gaming with complete peace of mind.

About Privacy General inquiries

For further questions, please reach out to our support team.

No, never. Hyebaji does not sell your personal data to any third party. Your information is used solely for service operations, KYC verification, and legal compliance.

Yes, you can submit a request to [email protected]. However, transaction and KYC records must be retained for a specified period due to legal obligations. All other data will be deleted.

Yes, but only with your consent. During registration, you have the option to opt in or out of marketing communications. You can opt out at any time.

No. Your password is stored using bcrypt hashing encryption. No Hyebaji staff member or system can view your actual password.

KYC documents are retained for up to 5 years after account closure in compliance with AML (Anti-Money Laundering) regulations. They are automatically deleted after that period.

Yes, absolutely. In the event of a data breach, affected players will be notified within 72 hours via email or in-app notification, and immediate protective measures will be taken.
বাংলা