🔒 Data Security
Everything about how your data is collected, used, and kept safe at heybaje — all explained here in plain, easy-to-understand Bengali.
This Privacy Policy applies to all services on the heybaje platform. By using heybaje — whether through the website, mobile app, or any other channel — you are considered to have accepted the terms of this policy.
Heybaje is an online betting and entertainment platform built for Bangladeshi players. We believe privacy is a fundamental right, and it is our responsibility to be fully transparent about how every piece of your information is handled.
In brief: heybaje does not sell your data, does not share it with third parties without authorization, and only collects what is strictly necessary to provide the service.
This policy is Heybaje's Terms & Conditions and Responsible Gaming To be read alongside the policy.
Heybaje collects certain data in order to provide its services. This data falls into three categories:
Registration and identity information:
Transaction data:
Usage and technical data:
Betting history is retained solely for responsible betting monitoring and identity verification when required — for no other purpose.
Heybaje uses the information it collects only for specific, defined purposes. The table below outlines what each type of data is used for and the legal basis for doing so:
| Data type | Purpose of Use | Legal Basis |
|---|---|---|
| Name & Contact Information | Account creation, support, and notifications | Contract Performance |
| Identity document | KYC verification and age confirmation | Legal obligation |
| Payment Details | Deposit & Withdrawal Processing | Contract Performance |
| Betting history | Service delivery and responsible betting monitoring | Legitimate Interest |
| Technical Information | Security & Fraud Detection | Legitimate Interest |
| Usage Patterns | Service improvement and personalized experience | Consent |
Heybaje never sells your data to third parties for marketing purposes. You can opt out of promotional emails at any time.
Heybaje uses cookies and similar technologies on its website and app to enhance your browsing experience and help ensure security.
Cookie types:
Cookies can be managed or deleted through your browser settings. However, disabling essential cookies will prevent you from logging into your account.
On the mobile app, device IDs and session tokens are used in place of cookies, and are managed with the same level of security.
Heybaje uses industry-standard technologies and processes to protect your data. Rather than relying on a single layer of security, multiple layers of protection are maintained at all times.
Heybaje staff will never ask for your password or login credentials. If anyone does, contact support immediately.
Heybaje follows a "no more than necessary" approach to data retention. Once the purpose has been fulfilled or the retention period has lapsed, data is securely deleted.
You may request deletion of your data — however, records subject to legal obligations may not be eligible for removal.
You have several important rights over your personal data on heybaje. To exercise any of these rights, please contact our support team.
You can submit a request to find out what information heybaje holds about you.
You can request a correction if any of your information is inaccurate or out of date.
You may request deletion of data that is not required to be retained under legal obligations.
You can object to marketing communications or certain types of data processing at any time.
To exercise these rights support@heybaje.bestPlease email us at the address above. We will respond within 30 business days.
Heybaje strictly does not provide services to anyone under 18. This is not just a matter of compliance — it is an ethical responsibility we take seriously.
If you suspect a minor is using heybaje, please notify our support team immediately.
Heybaje reserves the right to update this policy as needed. For any significant changes, registered users will be notified via email or an in-platform announcement.
Any changes to this policy take effect from the date they are published. You can always check the "Last Updated" date at the top of this page to see when the most recent revision was made.
You will be notified at least 7 days before any major changes, giving you enough time to make an informed decision.
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us.
24/7 support in Bangla. Log in and start a chat.
Support@heybaje.best — response within 30 days.
Multiple layers of security work together to keep your data safe at all times.
All data transfers are encrypted with 256-bit SSL/TLS — the same level of security used by banks.
Mobile OTP for login and withdrawals — no one can access your account without your approval.
Our real-time system monitors every transaction and login, automatically blocking any suspicious activity.
Only the minimum information necessary to provide the service is collected. There is no reason to hold any data beyond that.
Regular security audits are carried out to identify system vulnerabilities. Any issues found are resolved immediately.
Only authorized personnel can access specific data, and all access is logged.
What we do differently from others when it comes to protecting your data.
Most platforms write their privacy policies in English, which can be difficult for Bangladeshi users to follow. At heybaje, the entire policy is written in plain, easy-to-understand Bengali — so you can clearly understand every detail.
Many free services generate revenue by selling user data. That does not happen at Heybaje — what you provide in exchange for services is transparent, and your data is never treated as a commodity.
If significant changes are made to the Privacy Policy, users will be notified in advance via email or in-app notification. Making changes without notice is not how we operate.
Your rights to view, correct, and delete your data aren't just on paper — they're easy to exercise in practice. Simply contact support and it gets done.
Which data is collected and why is clearly laid out in a table on this page — no guesswork needed.
Your full bKash or Nagad number is never stored — only the last four digits are kept. Payment data is handled according to a separate, dedicated security standard.
Concerns about sharing personal information online are very real in Bangladesh — and completely understandable. High-profile data breaches and misuse incidents over the years have made people rightfully cautious. Heybaje respects that caution and believes a platform only earns genuine trust when it leaves no gaps in how it protects user data.
The information you provide when registering with Heybaje is used solely for account creation and service delivery. It starts with three things: your name, mobile number, and email. A copy of your National ID may be requested for identity verification, but this is not mandatory unless you are looking to make a large withdrawal.
Many users ask about the security of their bKash or Nagad numbers. At Heybaje, only the last four digits of your payment number are stored in the system — the full number is never kept in any log file. This means that even in the event of unauthorized system access, your complete payment number cannot be retrieved.
Betting history is retained primarily as part of our responsible gaming programme. If it appears that someone is betting at an unusually high frequency or experiencing repeated losses, the support team may proactively reach out. This history is never shared with third parties.
Many platforms sell their users' data to advertising networks — it's one of their revenue streams. Heybaje does not do this, and has no intention of doing so. Our revenue comes from our services, not from selling data. That distinction matters.
There's no need to be concerned about cookies. On Heybaje, cookies are used for exactly three things: maintaining your login session, remembering your language preference, and collecting anonymous statistics on which parts of the site are being used. These statistics are fully anonymised — individual click behaviour is not stored separately.
Your IP address and device information are collected for security purposes. If someone attempts to log into your account from a new device or an unusual location, the system is able to detect it. This information is never used for advertising or any other commercial purpose.
Even after an account is closed, some data must be retained — this is a legal obligation. Financial transaction records are typically kept for 5–7 years. This is not a decision unique to Heybaje; it is standard practice for financial service providers. However, these records are never used for marketing or shared with third parties.
These are your rights over your own data on heybaje.
You have the right to know what information we hold about you.
If any of your information is incorrect, you can submit a request to have it corrected.
Request deletion of data we no longer need.
Request a copy of your own data.
The option to object to specific uses of your data.
Request to restrict the processing of certain personal data.
✅ What We Do
What Heybaje commits to doing.
⚠️ What We Don't Do
These are things Heybaje will never do.
Frequently asked questions about the Privacy Policy.
Every piece of your information is handled with care at heybaje. If you have any questions or concerns, support@heybaje.bestto get in touch. To learn more, Terms & Conditions and Responsible Gaming View page.