1. Data We Collect
When you register an account, use hiya baji's gaming and betting services, or contact our support team, we collect certain categories of personal data. The specific data collected depends on the nature of your interaction with the platform. The main categories are set out in the table below.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number | Registration & KYC verification |
| Contact Data | Mobile number, email address, city of residence | Registration & account updates |
| Financial Data | bKash / Nagad / Rocket account number, Visa/Mastercard last four digits, transaction history | Deposits & withdrawals |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Each platform visit |
| Usage Data | Games played, bet amounts, session duration, bonus activity, login history | Ongoing platform use |
| Communications Data | Support chat transcripts, email correspondence, survey responses | Support interactions |
hiya baji does not knowingly collect sensitive personal data such as biometric identifiers, medical records, or religious beliefs. Where identity documents are submitted for Know Your Customer (KYC) verification, those documents are processed solely for the purpose of age and identity confirmation and are not retained beyond the legally required period.
Data from third parties: hiya baji may receive limited data about you from third-party payment processors (such as bKash and Nagad) in the form of transaction confirmation records. This data supplements your account record solely for fraud prevention and financial reconciliation purposes.
2. How We Use Your Data
hiya baji processes personal data only for clearly defined, lawful purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are:
- Account creation and management: To register your account, authenticate your identity on login, and maintain your account settings and preferences.
- Service delivery: To make games, betting markets, live casino tables, and sports events available to you in accordance with your account status and jurisdiction.
- Payment processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain an accurate transaction record.
- Identity verification and fraud prevention: To verify that you meet the 18+ age requirement, to confirm your identity prior to processing significant withdrawals, and to detect and prevent fraudulent account activity, bonus abuse, money laundering, and other financial crimes.
- Responsible gaming compliance: To monitor gaming behaviour patterns that may indicate problem gambling and to enforce any deposit limits, self-exclusion periods, or account restrictions you or our responsible gaming team have applied to your account.
- Customer support: To respond to your enquiries, resolve disputes, and provide assistance with your account or the platform's features.
- Platform improvement: To analyse aggregated usage data, identify technical issues, test new features, and improve the overall performance and user experience of hiya baji.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or mobile notification — only where you have opted in to receive such communications. You may opt out at any time by contacting support.
- Legal and regulatory compliance: To retain records as required by applicable law, to respond to lawful requests from government or law enforcement authorities, and to enforce our Terms & Conditions.
hiya baji does not use automated decision-making processes that produce legal or similarly significant effects on you without a human review stage. Where profiling is used for responsible gaming or fraud detection, the outputs are reviewed by a member of the relevant team before any account action is taken.
3. Data Sharing & Disclosure
hiya baji does not sell, rent, or commercially transfer your personal data to any third party. Your data may be shared in limited, controlled circumstances as follows:
- Payment service providers: Transaction data (account numbers, amounts, timestamps) is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposits and withdrawals. These providers are contractually bound to handle your data securely and may not use it for any purpose other than payment processing.
- Identity verification partners: Where a third-party KYC or document verification service is used to assist in confirming your identity, the minimum necessary identity data is shared with that partner under a strict data processing agreement.
- Technology and infrastructure providers: hiya baji uses cloud hosting, content delivery, and analytics infrastructure providers. These providers process data on our behalf under binding agreements and are not permitted to use your data for their own purposes.
- Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data (e.g., game round IDs, stake values) as part of game auditing and fair-play certification processes. No identifiable personal data is shared with game studios.
- Legal and regulatory authorities: hiya baji will disclose personal data to government agencies, law enforcement bodies, or courts when required to do so by a lawful order or when hiya baji reasonably believes that disclosure is necessary to protect the rights, property, or safety of the platform or its users.
Cross-border transfers: Some of hiya baji's infrastructure and service providers operate outside Bangladesh. Where personal data is transferred internationally, hiya baji takes steps to ensure that appropriate contractual protections are in place to maintain a standard of data protection equivalent to that described in this policy.
4. Cookies & Tracking
hiya baji uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your login session, remember your preferences, and collect analytical data that helps us understand how the platform is used.
The categories of cookies used by hiya baji are as follows:
- Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as login session management, account security tokens, and game state persistence. These cookies cannot be disabled without breaking platform functionality.
- Performance and analytics cookies: These cookies collect anonymised data about how players navigate the platform — which pages are visited most frequently, where errors occur, and how long sessions last. This data is used to improve platform performance and user experience. No identifiable personal data is included in this analytics dataset.
- Functional cookies: These cookies remember your preferences — such as your preferred language (English), display settings, and notification choices — so that you do not need to re-enter them on every visit.
- Fraud prevention and security cookies: These cookies help hiya baji identify and prevent fraudulent activity, detect bots and automated scripts, and protect the integrity of the platform and its users.
hiya baji does not use third-party advertising or retargeting cookies that track your activity across external websites. You may adjust cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect your ability to use certain features of the hiya baji platform, including the ability to remain logged in across page loads.
5. Data Retention
hiya baji retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The general retention periods applicable to the main data categories are:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal compliance, fraud prevention |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| KYC / Identity Documents | 5 years from submission or account closure (whichever is later) | Regulatory compliance |
| Support Communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical & Usage Logs | 13 months on a rolling basis | Security monitoring, fraud detection |
| Marketing Preferences | Until opt-out or account closure | Consent-based processing |
When data is no longer required for any of the purposes listed above, hiya baji securely deletes or anonymises it. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and platform improvement purposes.
Self-exclusion records: Where a player has self-excluded from hiya baji for responsible gaming reasons, we retain a record of that exclusion and the associated account details for the duration of the exclusion period plus five years, in order to prevent re-registration in breach of the exclusion.
6. Data Security
hiya baji implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:
- Encryption in transit: All data transmitted between your browser or app and hiya baji's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption. The padlock indicator in your browser address bar confirms an active, valid certificate.
- Encryption at rest: Sensitive data fields — including password hashes, payment identifiers, and identity document references — are encrypted within hiya baji's database infrastructure.
- Password security: Passwords are stored as salted hashes using an industry-standard one-way algorithm. hiya baji staff cannot read or retrieve your plaintext password. You should choose a strong, unique password and never share it with anyone — including hiya baji staff, who will never ask for it.
- Access controls: Internal access to personal data is governed by role-based access controls. Staff members can only access the data necessary to perform their specific job function. All internal data access is logged and audited.
- Security monitoring: hiya baji's infrastructure is monitored continuously for anomalous activity, intrusion attempts, and data exfiltration indicators. Security events are reviewed by the platform's security team on a 24/7 basis.
- Third-party security standards: All third-party service providers that process personal data on hiya baji's behalf are assessed for their security practices prior to engagement and are contractually required to maintain standards commensurate with those described in this policy.
While hiya baji takes all reasonable and practicable steps to protect your data, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, hiya baji will notify affected users promptly in accordance with applicable obligations.
7. Your Privacy Rights
As a registered player on hiya baji, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond to all verified requests within 30 calendar days.
- Right of access: You may request a copy of the personal data hiya baji holds about you, together with information about how it is being used and the legal basis for processing it.
- Right to rectification: If any personal data hiya baji holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. You can update many details (such as email address and phone number) directly within your account settings.
- Right to erasure: You may request that hiya baji delete your personal data. This right is subject to certain limitations — for example, we are required by law to retain financial transaction records for a minimum period and cannot delete data that is the subject of an active investigation. Where erasure is not possible in full, we will explain the specific reason.
- Right to restrict processing: You may request that hiya baji temporarily restrict the processing of your personal data — for example, while you contest the accuracy of the data or the legal basis for processing it.
- Right to data portability: You may request a copy of the personal data you have provided to hiya baji in a structured, commonly used, machine-readable format (such as CSV), where the processing is based on your consent or the performance of a contract.
- Right to withdraw consent: Where hiya baji processes your data on the basis of consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
- Right to object to marketing: You may opt out of receiving marketing emails, SMS notifications, and promotional communications from hiya baji at any time by contacting support or by following the unsubscribe link included in any marketing communication.
Identity verification for privacy requests: To protect your data from unauthorised disclosure, hiya baji is required to verify your identity before acting on a privacy rights request. We may ask you to confirm certain account details or provide a copy of an identity document before processing your request.
8. Contact & Policy Updates
If you have any questions, concerns, or complaints regarding this Privacy Policy or hiya baji's data practices, please contact our dedicated privacy support team:
- Email: [email protected] (use subject line: "Privacy Enquiry")
- Response time: All privacy-related enquiries are acknowledged within 3 business days and fully resolved within 30 calendar days.
hiya baji reviews this Privacy Policy on a regular basis to ensure it accurately reflects our current data practices, applicable legal requirements, and any changes to the platform's features and services. When a material change is made to the policy, registered players will be notified by email at least 14 days before the change takes effect. The "Effective" date at the top of this page reflects the date of the most recent update.
For questions related to responsible gaming, deposit limits, or self-exclusion, please visit our dedicated Responsible Gaming page. For a full overview of the rules governing your use of hiya baji, please review our Terms & Conditions.
18+ only: hiya baji's platform and this Privacy Policy apply exclusively to individuals aged 18 years and above. If you believe that a person under the age of 18 has accessed hiya baji and provided personal data, please contact us immediately at [email protected] so that we can take appropriate action.