Privacy Policy — heybdji

Section 01

Data We Collect

heybdji collects personal data that is necessary to operate a safe, fair, and compliant online casino and sports betting platform for players in Bangladesh. We collect only the data that is strictly required for the purposes set out in this Privacy Policy. Below is a summary of the categories of personal data we collect, along with the source from which each category is obtained.

heybdji does not collect sensitive personal data beyond what is strictly required for age verification and KYC compliance. We do not collect biometric data beyond the photograph required for identity document verification. We do not collect information about racial or ethnic origin, political opinions, religious beliefs, trade union membership, or health data unless it is directly relevant to a responsible gaming assessment.

You are not required to provide all of the data categories listed above to browse the heybdji website. However, certain data — particularly registration data and KYC documents — are mandatory to open an account, place bets, and process withdrawals. Where data is optional, this will be indicated clearly at the point of collection.

Section 02

How We Use Your Data

heybdji uses the personal data we collect for the following purposes. For each purpose, we identify the legal basis on which we rely to process your data lawfully.

• Account creation and management: To register your player account, verify your identity, and manage your ongoing relationship with heybdji. Legal basis: performance of a contract with you.
• Processing transactions: To process deposits, withdrawals, bonus credits, and refunds through your chosen payment methods including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Legal basis: performance of a contract with you.
• Age and identity verification (KYC): To confirm that you meet the minimum age requirement of 18 years and to verify your identity in compliance with our AML obligations. Legal basis: legal obligation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, match-fixing, abuse of bonus offers, and unauthorised account access. Legal basis: legitimate interests of heybdji and legal obligation.
• Responsible gaming compliance: To monitor your gambling activity for indicators of problem gambling, to enforce self-exclusion and deposit limit settings, and to fulfil our duty of care as a gambling operator. Legal basis: legitimate interests and legal obligation.
• Customer support: To respond to your queries, complaints, and feedback submitted via email or live chat. Legal basis: performance of a contract with you.
• Platform improvement: To analyse aggregated usage data and improve the performance, features, and user experience of the heybdji platform. Legal basis: legitimate interests of heybdji.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign messages (such as BPL cricket promotions, Eid bonus offers, or Pohela Boishakh specials) where you have opted in to receive such communications. Legal basis: your consent. You may withdraw this consent at any time by updating your marketing preferences in your account settings or by contacting [email protected].
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and enforce our Terms & Conditions. Legal basis: legal obligation.

heybdji does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects, except in the context of responsible gaming monitoring where automated pattern detection is used to identify potential problem gambling behaviour. Where such detection triggers a restriction on your account, you have the right to request human review of that decision by contacting [email protected].

Section 03

Data Sharing & Disclosure

heybdji does not sell, rent, or trade your personal data to any third party. We share your data only with the categories of recipient listed below, and only to the extent strictly necessary for the purposes described in this Privacy Policy.

• Payment service providers: When you deposit or withdraw funds, we share necessary transaction data with the relevant payment processor (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, BRAC Bank, Dutch-Bangla Bank, City Bank). These providers process your payment data under their own privacy policies and are contractually obligated to protect your data.
• Identity verification providers: We use trusted third-party KYC and AML screening services to verify the identity documents you submit. These providers are contractually bound to handle your data securely and solely for verification purposes.
• Game technology providers: Our casino games are delivered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process limited technical and gameplay data necessary to deliver the game experience. They do not receive your full personal or financial profile.
• IT infrastructure and hosting providers: heybdji uses secure, industry-standard hosting infrastructure. Our hosting and cloud service partners are contractually obligated to maintain appropriate data security standards and may not use your data for any purpose other than providing the contracted services.
• Regulatory and law enforcement authorities: We may disclose your personal data to applicable regulatory bodies, law enforcement agencies, or courts where required by law, pursuant to a court order, or where we believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Professional advisors: In limited circumstances, we may share relevant data with our legal advisors, auditors, or accountants where strictly necessary for the provision of professional services to heybdji, subject to confidentiality obligations.

Where heybdji shares data with third-party processors, we require them to maintain appropriate technical and organisational security measures and to process your data only on our documented instructions. We do not authorise any third-party processor to use your personal data for their own independent marketing or business purposes.

Section 04

Cookies & Tracking Technologies

heybdji uses cookies and similar tracking technologies on its platform to ensure the site functions correctly, to improve your experience, and to gather analytical data about how the platform is used. By continuing to use the heybdji platform, you consent to our use of cookies as described below.

heybdji does not use third-party advertising cookies or behavioural tracking cookies that profile your browsing activity across websites other than heybdji.net. We do not share cookie data with ad networks, social media platforms, or data brokers.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the functioning of the heybdji platform, including your ability to log in and maintain a secure session. Disabling functional or analytical cookies will not prevent you from using core platform features but may affect the quality of your experience.

Section 05

Data Security

heybdji takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the heybdji platform, ensuring that your login credentials, financial data, and personal information are protected in transit.
• Encrypted data storage for sensitive personal data including KYC documents and account credentials. Passwords are stored as salted cryptographic hashes — they are never stored in plain text.
• Access controls: Access to personal data held by heybdji is restricted to authorised personnel who require access to perform their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Two-factor authentication (2FA): heybdji supports SMS-based 2FA for all player accounts and strongly encourages its use. Enabling 2FA adds a significant additional layer of protection against unauthorised account access.
• Intrusion detection and monitoring: The heybdji platform is monitored continuously for security threats, unusual access patterns, and attempted intrusions. Security incidents are responded to promptly by our technical team.
• Regular security assessments: heybdji conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential weaknesses.
• Payment credential isolation: heybdji does not store your full payment credentials (bKash account details, Nagad PIN, card numbers) on its servers. Payment processing is handled directly by the relevant payment service provider via secure API connections.

Despite our best efforts, no data transmission over the internet or storage system can be guaranteed to be 100% secure. In the event of a data security breach that is likely to result in a risk to your rights and freedoms, heybdji will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

Section 06

Data Retention

heybdji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, reporting, or regulatory obligations.

When your personal data is no longer required for any of the purposes listed above, heybdji will securely delete or anonymise it in a manner that prevents recovery or reconstruction. Anonymised or aggregated data (from which no individual can be identified) may be retained indefinitely for platform analytics and business intelligence purposes.

Where you request the deletion of your personal data and heybdji has a legal obligation to retain that data for a specified period (for example, financial transaction records required for AML audit purposes), we will retain only the minimum data necessary to fulfil that obligation and will delete it as soon as the retention period expires.

Section 07

Your Privacy Rights

As a player on the heybdji platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the heybdji Data Protection team at [email protected] with a clear description of your request. We will respond within a reasonable timeframe, typically within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data that heybdji holds about you. This is sometimes called a Subject Access Request (SAR). We will provide a summary of your data in a clear and readable format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For standard account details, you may update information directly via your heybdji account dashboard.
• Right to erasure ("right to be forgotten"): You may request that heybdji delete your personal data. We will action this request where there is no legal basis for continued retention. Where a legal retention obligation applies (for example, AML record-keeping), we will inform you of the specific obligation and the date on which the data will be deleted once that obligation expires.
• Right to restrict processing: You have the right to request that heybdji restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing pending the outcome of a legitimate interest assessment.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit that data to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where heybdji relies on legitimate interests as its legal basis. You also have the right to object at any time to the use of your personal data for direct marketing purposes — this right is unconditional and will always be honoured.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. You can manage your marketing preferences within your account settings or by contacting [email protected].
• Right in relation to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. Where heybdji uses automated responsible gaming monitoring that results in an account restriction, you may request human review of that decision.

heybdji will not charge a fee for handling privacy rights requests in normal circumstances. We reserve the right to charge a reasonable administrative fee, or to decline a request, where a request is manifestly unfounded, repetitive, or excessive.

Section 08

Policy Updates & Contact

heybdji reserves the right to update or amend this Privacy Policy at any time. When we make a material change to this policy, we will update the "Last Reviewed" date at the top of this page and, where appropriate, notify active players via their registered email address. We may also display a notice on the heybdji platform to draw attention to significant changes.

Changes to this Privacy Policy take effect from the date they are published on this page. Your continued use of the heybdji platform after a policy update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how heybdji protects your personal data.

If you have any questions, concerns, or complaints about this Privacy Policy or the way heybdji handles your personal data, please contact us using the details below. Our support team operates 24/7 in Bangladesh Standard Time (BST, UTC+6) and will respond to privacy-related queries as a priority.

• Email: [email protected] (subject: "Privacy Policy Enquiry")
• Platform: heybdji.net — serving players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh
• Support Hours: 24/7 Bangladesh Standard Time (BST, UTC+6)
• Response Time: Privacy rights requests acknowledged within 5 business days; substantive responses within 30 days

heybdji is committed to working constructively with players to resolve any privacy-related concerns. We ask that you contact us in the first instance to allow us the opportunity to address your concern directly before escalating to any regulatory or supervisory authority.