Heybaji Aff — Your
Privacy and data protection

Heybaji Aff takes your privacy very seriously. This Privacy Policy explains what information we collect when you use our website, mobile app, or any of our services — why we collect it, and how we use it.

Heybaji Aff believes data protection is not merely a legal obligation — it is an ethical responsibility. Millions of Bangladeshi players use our platform every day, and their trust is our most valuable asset. Safeguarding that trust is our top priority.

Heybaji Aff collects only the information necessary to run our services smoothly and assist you effectively. We do not ask for or hold anything beyond what is needed.

Information collected directly from you:

• Name, date of birth, and gender (collected at registration)
• Mobile number and email address
• Payment details — bKash/Nagad/Rocket number (for processing transactions)
• National ID number for identity verification (as part of the KYC process)
• Messages & Complaints Sent to Support

Automatically Collected Information:

• Device type, operating system, and browser information
• IP address and approximate location
• Log of which pages you visited on the platform and for how long
• Gaming history and transaction records
• Cookie and session data

Heybaji Aff uses your information only for specific purposes. Your data is never used for anything beyond the following:

Your information is never used to build advertiser profiles or shared with marketing companies. Heybaji Aff uses data solely to improve its own services.

Heybaji Aff never sells or leases your personal information to third parties — not ever. However, certain data may be shared in the limited circumstances outlined below:

Service Provider Partners:

• Payment Processors: Only the minimum necessary information is shared to process transactions via bKash, Nagad, and similar services.
• Game providers: Session data required to run games — not personal identity information.
• Security Services: Specialized software is used to detect fraud.

For legal requirements:

Heybaji Aff is legally required to disclose information when directed by a court or regulatory authority. In such cases, only the specific data requested is shared — nothing more.

Heybaji Aff uses cookies on its website and app. Cookies are small text files saved to your device that recognize you on your next visit, keeping you logged in and helping pages load faster.

Types of cookies we use:

• Essential cookies: Required for login sessions and security — this cannot be disabled.
• Performance Cookies: To understand which pages are most visited — and improve the site accordingly.
• Functionality Cookies: To remember your language preferences and settings.
• Security Cookies: To protect against CSRF and other attacks.

You can manage or delete cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain features on the site.

Heybaji Aff follows the highest industry standards to protect your data, ensuring security on both a technical and organizational level.

Technical Safeguards:

• TLS 1.3 encryption applied to all data transfers
• Sensitive data is encrypted using AES-256
• Active firewall and DDoS protection
• Regular penetration testing and vulnerability scanning
• Option to enable two-factor authentication (2FA)

Organizational Safeguards:

• Only authorized personnel have access to your data
• Staff receive regular data protection training.
• Data access logs are maintained and monitored
• Timely data breach notification policy

Heybaji Aff does not retain your information indefinitely. Each category of data has a defined retention period.

• Account information: For the duration of the account + 5 years after closure (for legal compliance)
• Transaction Records: 7 years (in compliance with financial regulations)
• KYC documents: 5 years
• Support Conversations: 3 years
• Log Files: 12 months
• Cookie data: Up to 13 months

Once the retention period expires, data is securely deleted or anonymized. Marketing data is removed immediately upon account closure.

Heybaji Aff believes you should have full control over your own information. You may exercise the following rights at any time:

To exercise any of these rights, please contact our support team. We typically respond within 30 days.

Heybaji Aff strictly does not collect data from anyone under 18. Our services are for adults only. Age is verified at registration, and additional proof of identity may be requested in cases of doubt.

If we discover that data from a minor has been collected inadvertently, it will be deleted immediately and the associated account will be terminated.

Heybaji Aff may update this Privacy Policy from time to time. For any significant changes, registered members will be notified via email or in-app notification. The effective date of any update will always be displayed at the top of this page.

If you have any questions or concerns about this Privacy Policy, please reach out to our dedicated privacy team. We aim to respond within 48 hours.

Related Policies: Terms and Conditions | Responsible Gaming