Privacy Policy
he baji Platform
At he baji, your privacy matters. This Privacy Policy explains exactly what personal data we collect when you use he-baji.ws, how we use it, who we may share it with, and the rights you hold over your own information. We are committed to handling your data with transparency and care.
Information We Collect
When you register for or use the he baji platform at he-baji.ws, we collect certain categories of personal data in order to operate the service, verify your identity, process payments, and comply with our legal obligations. The following describes each category of data we collect and the context in which it arises.
Registration and Identity Data
When you create a he baji account, you provide us with your full legal name, date of birth, residential address in Bangladesh, a valid mobile number, and an email address. This information is collected at registration and forms the basis of your account record. It is used to verify your identity (KYC), to personalise communications, and to comply with anti-money-laundering (AML) obligations.
Financial and Payment Data
When you make a deposit or request a withdrawal through he baji, we collect the details of the payment method you use — for example, a bKash or Nagad wallet number, a Rocket or Upay account identifier, or the last four digits and card network of a Visa or Mastercard card. He baji does not store full card numbers. Bank transfer details (such as your Dutch-Bangla Bank or City Bank account information) are collected only to the extent necessary to process the transaction. All payment data is transmitted under 256-bit SSL encryption.
Usage and Behavioural Data
He baji automatically collects data about how you interact with the platform. This includes: your IP address and approximate geographic location; your device type, operating system, and browser version; pages visited and features used within he-baji.ws; game sessions played, bets placed, and bet amounts; session duration and frequency of visits; and in-app navigation paths. This data helps he baji deliver a stable, personalised experience and identify potential fraud or AML risks.
Communications Data
If you contact he baji's support team via live chat, email, or any other channel, we retain a record of that correspondence. This includes your contact details, the content of your messages, and the timestamps of each interaction. Communication records are maintained for a minimum of 12 months for quality-assurance and dispute-resolution purposes.
Verification Documents
As part of our KYC process, we may request copies of identity documents such as your national ID card, passport, birth certificate, or driving licence. These documents are stored securely and accessed only by authorised compliance personnel. They are retained for as long as your account remains active and for a defined period after account closure, as set out in the Data Retention section below.
Identity Data
Full name, date of birth, address, mobile number, email — collected at registration for KYC and AML compliance.
Payment Data
bKash/Nagad/Rocket wallet IDs, last four card digits. Full card numbers are never stored. All data encrypted in transit.
Usage Data
IP address, device info, pages visited, game sessions, bet history — used for platform stability, fraud detection, and personalisation.
| Data Category | Examples | Purpose | Legal Basis |
|---|---|---|---|
| Identity Data | Name, DOB, address, NID | Account creation, KYC verification, AML compliance | Contract; Legal obligation |
| Financial Data | bKash number, card last 4 digits, bank account reference | Processing deposits and withdrawals | Contract; Legal obligation |
| Usage Data | IP address, device ID, pages visited, game history | Platform operation, fraud prevention, personalisation | Legitimate interest |
| Communications Data | Live-chat transcripts, support emails | Support delivery, dispute resolution | Contract; Legitimate interest |
| Verification Documents | Passport scan, NID photo | KYC identity verification | Legal obligation |
| Marketing Preferences | Email/SMS opt-in status, promotion history | Sending bonus offers and promotions | Consent |
How We Use Your Data
He baji uses the personal data we collect for a defined set of purposes, each grounded in a lawful basis. We do not use your data for purposes incompatible with those described in this Privacy Policy, and we do not sell your personal data to third parties for their own marketing purposes.
Account Management and Service Delivery
The primary purpose for which we use your data is to provide the he baji service. This includes creating and maintaining your account, verifying your identity, processing your deposits and withdrawals, making games and betting markets available to you, and delivering customer support when you need it. Without processing your identity and financial data, he baji cannot operate your account.
Fraud Prevention and AML Compliance
He baji uses usage data, financial data, and identity data to monitor for signs of fraud, money laundering, match-fixing, bonus abuse, and other prohibited conduct described in our Terms & Conditions. Automated monitoring systems flag unusual patterns — such as rapid multiple deposits from different payment methods, structured deposits designed to avoid reporting thresholds, or game-play patterns inconsistent with recreational use — for review by our compliance team. Where suspicious activity is identified, we are required by our AML obligations to retain records and, where necessary, report to relevant authorities.
Responsible Gaming
He baji uses your account and behavioural data to support responsible gaming. This includes monitoring session duration, bet frequency, and deposit patterns to identify signs of potentially problematic gambling behaviour. Where our systems detect such indicators, our responsible gaming team may make contact to offer support tools such as deposit limits, session time-outs, and self-exclusion. This processing is carried out in your interests and in fulfilment of our responsible gaming commitments.
Marketing Communications
Where you have provided your consent, he baji will use your contact details to send you promotional communications — including bonus offers, free-spin promotions, seasonal campaigns tied to events such as BPL cricket season, Eid, and Pohela Boishakh, and other marketing messages. You may withdraw your consent to marketing communications at any time by updating your notification preferences in Account Settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Platform Improvement and Analytics
Aggregated and anonymised usage data is used by he baji to understand how players interact with the platform, which games and features are most popular, and where usability improvements can be made. This analysis does not involve identifying individual players and is carried out solely to improve the he baji product.
Fraud & AML Monitoring
Automated systems monitor account activity for AML indicators and fraudulent patterns. Compliance staff review flagged accounts. Records are retained as required by law.
Responsible Gaming Use
Behavioural data powers he baji's responsible gaming tools — deposit-limit prompts, session alerts, and self-exclusion checks. Your wellbeing is part of the data picture.
Marketing (Consent Only)
Promotional emails and SMS messages are sent only with your explicit consent. You can opt out any time via Account Settings — no questions asked.
Data Sharing & Third Parties
He baji does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only with trusted partners and service providers who assist us in operating the platform, and only to the extent strictly necessary for the defined purpose. All third-party processors who handle he baji player data are bound by data processing agreements that require them to maintain appropriate technical and organisational security measures.
Payment Processors
To process your deposits and withdrawals, he baji shares the relevant transaction data with your chosen payment provider — for example, bKash, Nagad, Rocket, Upay, Visa's payment network, Mastercard's payment network, or your chosen bank (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). He baji shares only the data that your payment provider requires to execute the transaction. He baji does not share your account password, full identity documents, or game history with payment processors.
Game Providers and Platform Technology Partners
He baji's game library is powered by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game from one of these providers on he-baji.ws, your session data — including bet amounts, game outcomes, and session timestamps — may be processed by that provider's systems in order to deliver the game. These providers operate under strict data processing agreements with he baji.
Compliance and Legal Disclosure
He baji may be required to disclose personal data to law enforcement authorities, financial intelligence units, or other regulatory bodies where required by applicable law. He baji will comply with all lawful requests for data disclosure and will, where permitted, notify the affected account holder of such a disclosure.
Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets involving the he baji platform, player account data may be transferred to the successor entity as part of that transaction. Players would be notified of any material change in data controller prior to the transfer taking effect, and the successor entity would be bound by privacy obligations at least equivalent to those set out in this Privacy Policy.
No data sales: He baji does not sell your personal data to advertisers, data brokers, or any third party for their own marketing or commercial purposes. Your data is used to operate your account and deliver the he baji service — nothing more.
Cookies & Tracking Technologies
He-baji.ws uses cookies and similar tracking technologies — including browser local storage and session tokens — to operate the platform, maintain your login session, remember your preferences, and collect anonymous analytics about how the site is used. This section explains the categories of cookies we use and how you can control them.
Strictly Necessary Cookies
These cookies are essential for the basic functionality of he-baji.ws. They include your session authentication token (which keeps you logged in between pages), CSRF protection tokens, and load-balancer cookies that ensure your requests are routed consistently. Strictly necessary cookies cannot be disabled because the platform cannot function without them. They do not collect personal data beyond what is required for session management.
Functional Cookies
Functional cookies remember your stated preferences — such as your preferred game lobby view, notification settings, and language/display choices — so that you do not have to reset them on every visit. These cookies improve your experience but are not strictly necessary. You may disable them via your browser settings, though doing so may affect some convenience features.
Analytics Cookies
He baji uses anonymised analytics to understand aggregate platform usage patterns. Analytics cookies collect data such as which pages are visited most frequently, how long users spend on the lobby page, and which device types are most common among Bangladesh players. This data is processed in aggregate and does not identify individual users. Analytics cookies can be disabled via your browser settings or by opting out in Account Settings.
Managing Cookies
You can manage, restrict, or delete cookies using your browser's built-in settings. Most modern browsers — including Chrome, Firefox, Edge, and Safari — allow you to view and delete stored cookies, block third-party cookies, and configure cookie acceptance on a site-by-site basis. Note that disabling strictly necessary cookies will prevent you from logging in to your he baji account. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.
| Cookie Type | Can Disable? |
|---|---|
| Strictly Necessary | No |
| Functional | Yes |
| Analytics | Yes |
He baji does not use advertising or retargeting cookies. No third-party ad networks receive cookie data from he-baji.ws.
Data Security & Retention
He baji implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption on all pages and all data transmitted between your device and he-baji.ws servers.
- Cryptographic password hashing — your account password is never stored in plain text. He baji uses industry-standard one-way hashing algorithms so that even internal staff cannot read your password.
- Role-based access controls — only authorised personnel whose job function requires access to specific categories of player data are permitted to access it. Access is logged and audited.
- Two-factor authentication (2FA) — players are encouraged to enable SMS-based 2FA on their accounts. Internal system access by he baji staff also requires multi-factor authentication.
- Regular security reviews — he baji conducts periodic internal security assessments of platform infrastructure and data-handling processes.
- Incident response procedures — in the event of a confirmed data breach that poses a risk to player rights, he baji will notify affected players via their registered contact details as promptly as practicable.
Data Retention
He baji retains personal data for as long as your account is active and for a defined period after account closure. Identity and financial records — including KYC documents and transaction histories — are retained for a minimum of 5 years after account closure to satisfy AML record-keeping requirements. Communications records are retained for a minimum of 12 months. Analytics data is anonymised after 24 months. When retention periods expire, data is securely deleted or permanently anonymised.
256-bit SSL Encryption
All data in transit between your device and he-baji.ws is encrypted using 256-bit TLS. Look for the padlock icon in your browser address bar.
Password Hashing
Passwords are stored as irreversible cryptographic hashes. He baji staff cannot read your password. Never share your password or OTP with anyone.
Retention Schedule
KYC & financial records: 5 years post-closure. Communications: 12 months. Analytics: anonymised after 24 months.
Your Privacy Rights
As a he baji player, you hold a set of rights over your personal data. He baji is committed to honouring these rights promptly and without undue obstacle. To exercise any of the rights listed below, contact the he baji support team via live chat at he-baji.ws. He baji will respond to verified rights requests within a reasonable timeframe and will not charge a fee for the exercise of these rights in ordinary circumstances.
Right of Access
Request a copy of the personal data he baji holds about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data in your account record.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restrict Processing
Request that he baji restrict the processing of your data while a dispute about its accuracy or lawfulness is resolved.
Right to Data Portability
Receive a structured, machine-readable copy of the personal data you have provided to he baji and transfer it to another service provider.
Right to Object
Object to the processing of your data on the basis of legitimate interests, including for direct marketing purposes. Objecting to marketing takes effect immediately.
Rights re: Automated Decisions
Request human review of any decision made solely by automated processing that significantly affects you, such as an account suspension triggered by fraud-detection systems.
Right to Withdraw Consent
Withdraw your consent to marketing communications or other consent-based processing at any time via Account Settings, without affecting prior lawful processing.
How to exercise your rights: Contact the he baji support team via live chat at he-baji.ws. To protect your privacy, he baji will verify your identity before actioning any rights request. Please allow up to 30 days for a full response to complex requests. He baji will not charge a fee for rights requests made in good faith.
Children & Minors
He baji is an adults-only platform. Access to and use of he-baji.ws is strictly prohibited for individuals under the age of 18. He baji does not knowingly collect, store, or process the personal data of anyone under the age of 18. Registration requires players to confirm that they are 18 years of age or older, and age verification is conducted as part of the KYC process before the first withdrawal is processed.
If he baji becomes aware — through its own age-verification processes, a report from a concerned third party, or any other means — that an account has been registered by a person under the age of 18, the following steps will be taken immediately: the account will be suspended; all deposits made by the underage user will be returned to the payment method used; any winnings generated during the period of underage use will be forfeited; and all personal data associated with the account will be securely deleted from he baji's systems within a reasonable timeframe, subject only to any legal reporting obligations triggered by the discovery.
If you are a parent or guardian and believe that a minor in your care has registered a he baji account without your knowledge, please contact the he baji support team immediately via live chat at he-baji.ws. He baji takes reports of underage use with the utmost seriousness and will investigate all such reports promptly. He baji recommends that parents and guardians use parental control software to restrict access to online gambling platforms on shared or family devices.
18+ Strictly Enforced
He baji verifies player age at registration and at first withdrawal. Accounts found to belong to under-18 players are closed immediately and deposits returned. Winnings from underage accounts are forfeited. Personal data is deleted.
Policy Updates & Contact
He baji reserves the right to update or amend this Privacy Policy at any time. When material changes are made to the way we collect, use, or share your personal data, we will notify registered players via the contact method associated with their account — typically by email or by an in-platform notification — prior to the changes taking effect. The effective date displayed at the top of this document will be updated to reflect the most recent revision.
Minor, non-material changes — such as clarifications of existing practices, corrections of typographical errors, or formatting updates — may be made without prior notification, though the effective date will still be updated. We encourage all players to review this Privacy Policy periodically to stay informed about how he baji handles their personal data.
Continued use of he-baji.ws following notification of updated Privacy Policy terms constitutes acceptance of those updated terms. If you do not accept the updated terms, you must discontinue use of the platform and contact support to request account closure in accordance with our account closure procedures.
How to Contact Us About Privacy
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data on he baji, please contact the support team via live chat at he-baji.ws. Our support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays. You may also write to us via email at the address shown in the footer of this page. He baji aims to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).
Policy Change Notifications
Material changes are communicated by email or in-platform notification before they take effect. The effective date at the top of this page is always current.
Privacy Support
Privacy enquiries are handled via live chat at he-baji.ws, 24/7, including Bangladesh public holidays. Response target: 5 business days (UTC+6).
Email address for privacy contact: [email protected] — displayed as plain text only. Do not send sensitive personal data or documents via unencrypted email. Use live chat for secure communications.
Why Players Trust he baji
Privacy is one pillar of the trust that Bangladesh players place in the he baji platform. Here is a summary of the commitments we back every account with.
SSL-Secured Platform
Every page on he-baji.ws is served over HTTPS with 256-bit SSL encryption. Your login credentials, payment details, and personal data are encrypted in transit at all times.
No Data Sales
He baji never sells your personal data to advertisers, data brokers, or third-party marketers. Your information stays within the he baji ecosystem and its vetted service partners.
Consent-First Marketing
Promotional messages are sent only with your explicit opt-in. You can withdraw consent at any time via Account Settings — no delays, no re-confirmation loops.
Minimal Data Principle
He baji collects only the data needed to operate your account and comply with legal obligations. We do not collect data speculatively or hold it longer than necessary.
Player Rights Respected
Access, rectification, erasure, portability, and objection rights are honoured on request. He baji processes rights requests within 30 days at no charge.
24/7 Privacy Support
Our support team is available around the clock, every day of the year including Eid and Bangladesh public holidays, to address privacy questions and data requests.
Safe, Secure & Transparent Gaming
Now that you know exactly how he baji protects your data, explore our full game library, place live cricket bets, or log in to your account — all on a platform built for Bangladesh players.