Privacy Policy — hy baji Data Protection Commitments

hy baji collects personal data from players at various points during registration, account verification, gameplay, and customer support interactions. The categories of personal data we collect include:

1.1 Registration & Account Data

When you create a hy baji account, we collect the following information directly from you:

• Full legal name as it appears on your government-issued identification document.
• Date of birth — collected to verify that you meet the 18+ age requirement.
• Email address — used for account communications, transaction notifications, and support correspondence.
• Mobile phone number — used for two-factor authentication and account security alerts.
• Residential address — including division, district, and postal code within Bangladesh.
• Username and password — your chosen login credentials (passwords are stored as a one-way cryptographic hash and are never stored in plain text).

1.2 Identity Verification (KYC) Data

In order to comply with responsible gaming standards and financial integrity requirements, hy baji collects the following identity verification documents from players prior to processing withdrawals:

• National Identity Card (NID) issued by the Government of Bangladesh, or a valid passport or driving licence.
• Proof of residential address, such as a recent utility bill or bank statement dated within three months.
• Confirmation of the mobile banking account (bKash, Nagad, Rocket, or Upay) used for transactions, linking it to the account holder's identity.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal, hy baji records the following transaction data:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer, or card).
• Transaction reference numbers provided by the payment provider.
• Transaction amounts in Bangladeshi Taka (BDT / ৳), timestamps, and processing status.
• Account or wallet identifiers associated with the payment method (partial numbers only; full card or wallet numbers are not stored on hy baji systems).

1.4 Technical & Usage Data

When you access hy baji, our servers and analytics tools automatically collect certain technical information about your device and browsing behaviour:

• IP address and approximate geographic location derived from it.
• Device type, operating system, browser type and version.
• Pages visited, time spent on each page, click paths, and session duration.
• Referring website or search query that brought you to hy-baji.ws.
• Game session data, including games played, wager amounts, outcomes, and session timestamps.

1.5 Customer Support Communications

Any email correspondence you exchange with the hy baji support team at [email protected] is retained as part of your account record. This includes the content of your messages, attachments you send, and our responses. This data is used to resolve disputes, improve service quality, and maintain an audit trail for compliance purposes.

hy baji processes personal data only where there is a lawful basis to do so. The following table summarises the primary purposes for which we use your data and the legal basis that applies in each case:

hy baji will not process your personal data for purposes that are incompatible with those listed above without first notifying you and, where required, obtaining your explicit consent. Where we rely on consent as the legal basis for any processing activity, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of any processing that took place prior to withdrawal.

hy baji does not sell, rent, or otherwise provide your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary to fulfil the purposes described in this policy:

3.1 Payment Processing Partners

To process deposits and withdrawals, hy baji shares the minimum necessary transaction data with our authorised payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each of these partners operates under its own applicable privacy and data security frameworks and is independently responsible for the data it processes in connection with your transactions.

3.2 Game Studio Providers

Game studios that supply live casino, slot, and sports betting content to the hy baji platform — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — may receive session identifiers and anonymised player data necessary to deliver their games through the hy baji interface. These studios do not receive your full name, NID details, or payment credentials.

3.3 Compliance & Legal Obligations

hy baji may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, or where such disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, or other criminal activity. We will only make such disclosures to the extent required by applicable law and will, where legally permitted, notify you of any such disclosure request.

3.4 Service Providers & Technical Partners

hy baji engages third-party service providers to support the operation of the platform, including cloud hosting providers, cybersecurity services, analytics platforms, and email delivery services. These providers process personal data only on hy baji's instructions and under confidentiality obligations. They are not permitted to use your data for their own purposes.

3.5 Business Transfers

In the event that hy baji undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held about registered players may form part of the transferred assets. In such circumstances, hy baji will notify affected players by email prior to any transfer and will ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this policy.

hy baji uses cookies and similar tracking technologies to operate the platform, remember your preferences, monitor session security, and analyse how players use hy-baji.ws. The following categories of cookies are used on our platform:

You can manage or disable non-essential cookies through your browser's settings at any time. Please note that disabling functional or analytics cookies will not affect your ability to access the core hy baji platform, but may reduce the personalisation of your experience. Disabling strictly necessary or security cookies may prevent you from logging in or using certain features.

hy baji does not use cookies to serve third-party advertising or to track your activity across other websites that are unrelated to hy baji. Our cookie usage is limited to the operational and analytical purposes described above.

5.1 How Long We Keep Your Data

hy baji retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data (registration details, game history, transaction records): Retained for the duration of the account's active status and for a minimum of five (5) years following account closure, to support legal, compliance, and audit obligations.
• KYC documents (NID copies, proof of address): Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with standard financial recordkeeping requirements.
• Support correspondence: Retained for three (3) years from the date of the last interaction, or until the related account is closed, whichever is later.
• Technical and usage data (anonymised analytics): Retained in aggregated, non-identifiable form for up to twenty-four (24) months.

When personal data is no longer required for any lawful purpose, hy baji securely deletes or anonymises it so that it can no longer be associated with an identifiable individual.

5.2 Security Measures

hy baji implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players' devices and the hy baji platform.
• Encrypted storage of passwords using one-way hashing algorithms — plain-text passwords are never stored.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with all access events logged.
• Regular security assessments and penetration testing of the platform's infrastructure.
• Two-factor authentication (2FA) options available for player accounts and mandatory for all internal administrative access.
• Secure, access-restricted servers for the storage of KYC documents and financial records.

While hy baji takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security against all threats. In the event of a data breach that is likely to result in a risk to the rights or freedoms of affected players, hy baji will notify impacted individuals without undue delay and will take immediate remediation steps.

As a registered hy baji player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with your registered account details. We will respond to all verified requests within 30 calendar days.

Please note that certain rights — particularly the right to erasure — may be limited where hy baji is required by law to retain your data for a minimum period (for example, financial transaction records under anti-money-laundering regulations). In such cases, hy baji will explain the applicable legal requirement and confirm what data can and cannot be deleted at that time.

The hy baji platform integrates with a number of third-party services that may process certain technical or transactional data as a result of your use of the platform. hy baji is not responsible for the privacy practices of these third parties. Players are encouraged to review the relevant privacy policies of the third-party services listed below:

7.1 Game Content Providers

Live casino and slot game content accessible through hy baji is powered by studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. When you launch a game from one of these studios, a session token is passed to the studio's game servers to authenticate your session. The studios do not receive your full personal profile; only the session token and anonymised player identifier are shared.

7.2 Mobile Banking & Payment Partners

Deposit and withdrawal transactions facilitated via bKash, Nagad, Rocket, and Upay are processed entirely within each provider's own infrastructure. hy baji receives only a transaction confirmation reference upon successful payment. Your full bKash, Nagad, Rocket, or Upay account credentials are never visible to or stored by hy baji at any stage of the transaction process.

7.3 Platform Infrastructure

hy baji uses cloud infrastructure and content delivery services to host and deliver the platform. These infrastructure providers process technical data (such as IP addresses and server logs) as part of normal platform operations. All infrastructure providers are contractually bound to process data only on hy baji's instructions and to maintain appropriate security standards.

7.4 External Links

The hy baji website does not contain links to external third-party websites. Should any reference to an external resource appear in any communication from hy baji, players should note that hy baji has no control over, and accepts no responsibility for, the content or privacy practices of any external website. Accessing any external website is entirely at the player's own discretion and risk.

8.1 Changes to This Privacy Policy

hy baji reviews this Privacy Policy periodically and reserves the right to update or amend it at any time. When material changes are made — for example, changes that affect how we collect or use your data — hy baji will notify registered players via email to the address provided at registration, at least 14 days before the changes take effect. The effective date at the top of this document will always reflect the date of the most recent revision.

Minor or clarificatory changes that do not affect player rights or the fundamental nature of our data processing may be updated without advance email notice, though the document's effective date will still be updated. Players are encouraged to review this policy periodically to stay informed of any developments.

Your continued use of the hy baji platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to a material change, you may close your account by contacting support before the effective date of the change.

8.2 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data hy baji holds about you, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 8:00 AM – 12:00 AM Bangladesh Standard Time (BST, UTC+6), daily
• Response Time: hy baji aims to respond to all privacy-related enquiries within 5 business days and to formal data subject access requests within 30 calendar days.

When contacting us about a privacy matter, please include your registered username and the email address associated with your hy baji account so that we can locate your records and respond to your request promptly and accurately. Do not include your password or full payment account numbers in any correspondence with hy baji.

8.3 Responsible Gaming & Data

hy baji uses game session and account activity data as part of our responsible gaming monitoring obligations. This means that if our systems detect patterns consistent with problem gambling behaviour — such as extended session durations, rapid increases in deposit frequency, or repeated self-exclusion requests — a member of our responsible gaming team may contact you using your registered contact details. This processing is carried out in your interest and in fulfilment of our duty of care as a gaming operator. For more information, please review our Responsible Gaming policy. All players on the hy baji platform must be 18 years of age or older.