Privacy Policy

1 Information We Collect

When you register for an account, use platform services, or contact our support team, hiy baji collects a range of personal data. The categories of information we collect are described in the table below. We collect only what is necessary for the purposes set out in this Privacy Policy.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data except where strictly required by law and explicitly consented to by you. Children under the age of 18 are strictly prohibited from using hiy baji, and we do not knowingly collect data from minors.

2 How We Use Your Data

hiy baji processes your personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are set out below:

• Account management: To create, maintain, and administer your player account, including processing logins, managing your account balance in Bangladeshi Taka (৳), and updating your profile information.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records in BDT.
• Identity verification and fraud prevention: To verify your age (18+ requirement), confirm your identity as part of our KYC process, and detect and prevent fraudulent transactions, account takeovers, and money laundering activity.
• Service delivery: To provide access to cricket betting, live casino games, slots, and all other features available on the hiy baji platform.
• Customer support: To respond to your queries, resolve account disputes, process bonus claims, and handle complaints submitted to our English-language support team.
• Responsible gaming: To monitor gambling behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil our duty-of-care obligations to players.
• Marketing and promotions: To send you information about offers, seasonal promotions (such as those tied to Eid, Pohela Boishakh, and BPL tournament fixtures), and VIP programme updates — only where you have opted in to receive such communications.
• Platform improvement: To analyse usage patterns, diagnose technical issues, run A/B tests, and improve the overall performance and design of the hiy baji platform.
• Legal compliance: To comply with applicable laws, respond to lawful requests from government authorities, and fulfil our record-keeping obligations under financial regulations.

3 Legal Basis for Processing

hiy baji processes your personal data only where a valid legal basis exists. Depending on the nature of the processing activity, we rely on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and hiy baji — for example, creating your account, processing payments, and providing platform services.
• Legal obligation: Processing required to comply with applicable law — for example, KYC verification, anti-money laundering checks, and record retention under financial regulations.
• Legitimate interests: Processing necessary for hiy baji's legitimate business interests, provided those interests are not overridden by your fundamental rights — for example, fraud detection, platform security, and service analytics. We conduct a balancing test before relying on this basis.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, sending you promotional emails and push notifications. You may withdraw consent at any time without penalty.

Where we rely on consent as the legal basis for any processing activity, we maintain records of that consent. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

4 Cookies & Tracking Technologies

hiy baji uses cookies and similar tracking technologies to ensure the platform operates correctly and to understand how players use our services. A cookie is a small text file stored on your device when you visit the platform. The cookies we use fall into the following categories:

We do not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertising networks. You may control cookie behaviour through your browser settings, but disabling strictly necessary cookies may prevent you from logging in or using core platform features.

5 Data Sharing & Disclosure

hiy baji does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited circumstances, and always with appropriate safeguards in place:

• Payment processors: We share financial data with bKash, Nagad, Rocket, Upay, and card scheme operators (Visa, Mastercard) to process your deposits and withdrawals. These parties are contractually bound to use your data solely to facilitate payment transactions.
• Identity verification providers: We share identity documents with trusted KYC service providers to fulfil our age and identity verification obligations. All such providers operate under strict data processing agreements.
• Game software providers: Game studio providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as player session tokens) necessary to deliver their games. They do not receive your full personal profile.
• IT and security service providers: Cloud hosting, server infrastructure, and cybersecurity service providers may process technical data on our behalf under confidential service agreements.
• Legal and regulatory authorities: We will disclose your personal data to law enforcement, regulatory bodies, or courts if legally required to do so by a valid court order, regulatory instruction, or applicable law. We will notify you of such disclosure where legally permitted to do so.
• Corporate restructuring: In the event of a merger, acquisition, or sale of assets involving hiy baji, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

6 Data Retention

hiy baji retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account's active status, plus an additional period following account closure as described below.
• Transaction records: Retained for a minimum of 7 years following the date of each transaction, in accordance with financial record-keeping requirements applicable to the Bangladesh market.
• Identity verification documents: Retained for a minimum of 5 years following account closure or the date of last verification, in line with anti-money laundering obligations.
• Support communications: Retained for 3 years following the resolution of the relevant support ticket or complaint.
• Marketing consent records: Retained for the duration of your subscription to marketing communications plus 2 years following opt-out, to demonstrate compliance with consent obligations.
• Technical and usage logs: Retained for up to 12 months for platform optimisation and security purposes, after which they are anonymised or deleted.

Following account closure — whether initiated by you or by hiy baji — your account will enter a structured data management process. Operational data is archived within 30 days of closure. After the applicable retention period has expired, data is securely deleted or irreversibly anonymised using industry-standard methods so that it can no longer be associated with you as an individual.

7 Your Privacy Rights

hiy baji respects your rights over your personal data. As a registered player, you are entitled to exercise the following rights at any time by submitting a written request in English to [email protected]:

• Right of access: You may request a copy of all personal data we hold about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances, such as while a rectification request is under review.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

We will respond to all valid rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. All communications regarding privacy rights requests will be conducted in English.

8 Data Security

hiy baji implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• AES-256 encryption at rest for stored personal data and financial records.
• Multi-factor authentication (MFA) options available to all registered players to add an additional layer of login security.
• Role-based access controls ensuring that only authorised hiy baji personnel have access to personal data, and only to the extent necessary for their role.
• Regular security audits and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities.
• Intrusion detection systems that monitor network traffic in real time and alert our security team to anomalous activity.
• Automated fraud detection algorithms that flag unusual transaction patterns, multiple account registrations from the same IP, and other indicators of fraudulent behaviour.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, hiy baji will notify affected players without undue delay and take all necessary steps to contain and remediate the breach.

9 Third-Party Services

The hiy baji platform integrates with a number of third-party services that are essential to delivering the player experience. These include game software providers, payment gateways, identity verification platforms, and analytics services. When you interact with services provided by these third parties — for example, launching a Pragmatic Play slot or processing a bKash payment — those interactions may be subject to the third party's own privacy practices.

hiy baji maintains written data processing agreements with all third-party service providers that process personal data on our behalf. These agreements require that service providers:

• Process personal data only on documented instructions from hiy baji.
• Implement appropriate technical and organisational security measures.
• Not engage additional sub-processors without prior written authorisation from hiy baji.
• Delete or return all personal data upon termination of the service relationship.
• Assist hiy baji in responding to player rights requests within the required timeframes.

Please note that hiy baji is not responsible for the privacy practices of third-party websites that are not operated by us. This Privacy Policy applies solely to data collected and processed through the hiy baji platform at hiy-baji.com.

10 Changes to This Policy

hiy baji reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will revise the effective date at the top of this page and, where practicable, notify registered players via the email address associated with their hiy baji account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the hiy baji platform after any revision constitutes your acceptance of the updated policy. If you do not agree with any changes, you should stop using the platform and request account closure by contacting [email protected].

If you have questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a concern about how your data has been handled, please contact our English-language support team:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 1 hour during peak Bangladesh Standard Time (BST, UTC+6) hours; within 24 hours at all other times.
• Availability: 24 hours a day, 7 days a week.
• Language: English only.