hey bhaji Privacy Policy

1. Data Controller & Scope

This Privacy Policy applies to all personal data collected by hey bhaji through its website at https://hey-bhaji.com, including all associated pages, services, promotions, and support channels. Hey bhaji operates as the data controller for the purposes of this policy, meaning it determines the purposes and means of processing personal data obtained through the platform.

This policy applies to all registered players, prospective players who browse hey bhaji without creating an account, and any individual who contacts hey bhaji's support team. It governs data collected through the website, mobile browsers, and any communication channels including live chat and email.

The primary market served by hey bhaji is Bangladesh. Players accessing the platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and all other cities and regions across Bangladesh are subject to this Privacy Policy in full. By registering an account or continuing to use hey bhaji after the effective date of this policy, you confirm your acceptance of the practices described herein.

2. What Personal Data We Collect

hey bhaji collects personal data through several distinct channels. The categories of data collected, and the context in which they are gathered, are set out below.

Registration Data

When you create a hey bhaji account, we collect the information you provide directly, including:

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify that you are at least 18 years of age)
• Residential address in Bangladesh
• Contact email address
• Mobile phone number (used for account security and payment verification)
• Username and encrypted password

Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to protect all players against fraud, hey bhaji requires identity verification before processing your first withdrawal. During the KYC process we may collect:

• Copies of government-issued photo identification such as your National ID Card (NID) or passport
• Proof of address documents (utility bill, bank statement, or similar)
• Proof of payment method ownership (screenshot or statement confirming the bKash, Nagad, or bank account is registered in your name)
• Selfie or live photograph where required for liveness verification

Financial Transaction Data

When you make a deposit or withdrawal on hey bhaji, we record transaction details including the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank), transaction reference numbers, amounts in Bangladeshi Taka (BDT), and timestamps. We do not store full payment account credentials beyond what is necessary for transaction reconciliation.

Gameplay & Behavioural Data

hey bhaji automatically records data about how you use the platform, including the games you play, bet amounts, session start and end times, game outcomes, and bonus usage. This data is used for account management, responsible gaming monitoring, fraud prevention, and improving the platform experience.

Technical & Device Data

We collect technical information about the device and browser you use to access hey bhaji, including IP address, device type, operating system, browser type and version, screen resolution, referring URL, and pages visited. This information is used for security purposes, fraud detection, and platform optimisation.

Communications Data

If you contact hey bhaji's support team via live chat or email, we retain records of those communications including the content of messages, the date and time of contact, and any resolution notes. These records allow us to provide consistent, high-quality support and to maintain accountability in dispute resolution.

3. How We Use Your Data

hey bhaji uses your personal data strictly for the purposes described in this policy. We do not sell your personal data to third parties. The primary purposes for which we process your data are as follows:

hey bhaji will not use your personal data for any purpose that is incompatible with those listed above without first notifying you and, where required, obtaining your consent.

4. Legal Basis for Processing

hey bhaji processes your personal data on the following legal bases:

• Contractual necessity: Processing your registration data, KYC documents, and financial transaction data is necessary to fulfil our obligations to you as a platform operator — specifically to maintain your account, process your payments, and deliver gaming services.
• Legitimate interests: hey bhaji processes technical, device, and behavioural data under its legitimate interest in maintaining platform security, preventing fraud, and improving the quality of the gaming experience offered to Bangladesh players.
• Compliance with legal obligations: Certain processing activities — particularly KYC verification and financial record-keeping — are carried out because they are required by applicable anti-money laundering and fraud prevention standards.
• Consent: Where hey bhaji sends you promotional communications or uses non-essential cookies, we rely on your consent. You may withdraw consent for marketing communications at any time by contacting our support team. Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.

5. Data Sharing & Third Parties

hey bhaji does not sell, rent, or trade your personal data. We share data only where necessary and only with the categories of recipients described below.

Game Providers

To deliver the gaming experience on the hey bhaji platform, technical session data is passed to third-party game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. These providers receive only the minimum data required to initialise and operate game sessions. They are contractually prohibited from using this data for any purpose beyond service delivery.

Payment Service Providers

To process deposits and withdrawals in BDT, hey bhaji works with mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank). Transaction data is shared with these providers solely for the purpose of executing payment instructions. hey bhaji does not share more data with payment partners than is required for transaction processing.

Fraud Prevention & Security Services

hey bhaji may use specialist third-party security and fraud detection services to analyse patterns in account behaviour, device data, and transaction history. Data shared with these services is subject to strict contractual data protection obligations and is used exclusively for security purposes.

Legal & Regulatory Authorities

hey bhaji will disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by applicable law, a valid court order, or where disclosure is necessary to protect the rights, safety, or property of hey bhaji, its players, or the public.

6. Cookies & Tracking Technologies

hey bhaji uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, remember your preferences, and gather anonymised analytics data. Below is a summary of the cookie categories used on hey bhaji:

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to log in and use hey bhaji's gaming services. hey bhaji does not use third-party advertising or retargeting cookies.

7. Data Retention

hey bhaji retains your personal data for as long as your account is active and for a defined period after account closure, in accordance with our record-keeping obligations and responsible gaming commitments. Specific retention periods by data category are as follows:

• Account and registration data: Retained for the lifetime of your account and for a minimum of 5 years following account closure.
• KYC and identity documents: Retained for a minimum of 5 years following the completion of verification or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years in line with standard financial record-keeping requirements.
• Gameplay and session data: Retained for 2 years for active accounts; retained for 5 years following account closure for responsible gaming audit purposes.
• Support communications: Retained for 2 years from the date of last contact.
• Self-exclusion records: Retained indefinitely to prevent reregistration during an active exclusion period and to maintain a permanent record of self-exclusion history.

When the applicable retention period expires, hey bhaji will securely delete or anonymise the relevant data so that it can no longer be linked to an identifiable individual.

8. Data Security Measures

hey bhaji employs a layered approach to data security designed to protect your personal information against unauthorised access, loss, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser and the hey bhaji platform, ensuring that your login credentials, payment details, and personal data are never sent in plain text.
• Encrypted password storage using industry-standard one-way hashing algorithms. hey bhaji staff cannot view your account password in plain text.
• Access controls that limit internal access to personal data to only those staff and systems that have a specific operational need to process it.
• Fraud detection systems that monitor account activity in real time and flag unusual patterns for review by our security team.
• Regular security reviews of platform infrastructure, third-party integrations, and internal procedures to identify and address potential vulnerabilities.

While hey bhaji takes data security very seriously and applies robust technical and organisational measures, no online platform can guarantee absolute security. You also have a role to play: please use a strong, unique password for your hey bhaji account and do not share your login credentials with anyone. If you believe your account has been compromised, contact our support team immediately.

9. Your Privacy Rights

As a hey bhaji player, you have the following rights in relation to your personal data. To exercise any of these rights, contact hey bhaji's support team via live chat or email at the address provided in Section 12.

• Right of access: You may request a copy of the personal data hey bhaji holds about you. We will respond to valid access requests within a reasonable timeframe.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account name and date of birth corrections, identity verification documents will be required.
• Right to erasure: In certain circumstances you may request that hey bhaji delete your personal data. Please note that this right is subject to our legal obligations to retain certain records (see Section 7). We cannot delete data that we are required to retain for KYC, anti-money laundering, or responsible gaming audit purposes.
• Right to restrict processing: You may request that hey bhaji restricts how it processes your data in certain circumstances, such as while a complaint is being investigated.
• Right to data portability: Where technically feasible, you may request a machine-readable export of the personal data you have provided to hey bhaji.
• Right to withdraw consent: Where hey bhaji processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the validity of processing carried out prior to withdrawal.

hey bhaji will not charge a fee for exercising any of the above rights in ordinary circumstances. If a request is manifestly unfounded or excessive, hey bhaji reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for doing so.

10. Children's Privacy

hey bhaji is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. The platform employs age verification procedures during registration and at the KYC stage specifically to prevent minors from accessing gambling services.

If hey bhaji discovers or is informed that it has inadvertently collected personal data from a person under the age of 18, the account will be closed immediately, all associated data will be deleted as soon as reasonably practicable, and any funds deposited will be returned to the source payment account. Parents or guardians who believe a minor may have accessed hey bhaji should contact our support team without delay.

11. Policy Updates

hey bhaji reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will display a prominent notice on the hey bhaji platform and update the "Last Reviewed" date at the top of this document.

Your continued use of hey bhaji after a Privacy Policy update takes effect constitutes your acceptance of the revised policy. If you do not agree with the changes, you should cease using the platform and may request account closure by contacting our support team. hey bhaji will not retroactively apply material changes to data already collected in a manner that would be disadvantageous to you without obtaining fresh consent where required.

We encourage all hey bhaji players to review this Privacy Policy periodically, particularly at the start of each calendar year and whenever you receive a notification about a policy update. Staying informed about how your data is used is an important part of playing safely and responsibly on hey bhaji.

12. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a complaint about how hey bhaji has handled your personal data, please contact our support team using the details below. Our support team operates 24 hours a day, 7 days a week, in English, on Bangladesh Standard Time (BST, UTC+6).

Support email: [email protected] (plain text — this address is not a clickable link). Alternatively, you may contact our team directly via the live chat feature available on the hey bhaji platform.

hey bhaji aims to acknowledge all privacy-related enquiries within 2 business days and to resolve complaints fully within 15 business days. For complex requests involving large volumes of data or disputed factual matters, we will notify you if additional time is required and will keep you informed of progress throughout the review process.

If you are unsatisfied with hey bhaji's response to a privacy complaint after going through our internal resolution process, you retain the right to escalate the matter through any applicable legal channel available to you under Bangladesh law.