haybaj Privacy Policy

This Privacy Policy ("Policy") describes how haybaj ("haybaj", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the haybaj website at haybaj.bet and all related services, games, and features offered through the platform (collectively, the "Service").

By registering an account with haybaj or by using the Service in any capacity, you acknowledge that you have read and understood this Policy and you consent to the collection and processing of your personal data as described herein. This Policy forms part of haybaj's Terms and Conditions and should be read in conjunction with those Terms.

This Policy applies to all hayb aj players accessing the Service from Bangladesh. If you have any questions about how haybaj handles your personal data, please contact our support team at [email protected] before using the Service.

haybaj acts as the data controller in respect of the personal data collected through the Service. As data controller, haybaj determines the purposes for which and the means by which your personal data is processed. All enquiries regarding data processing, access requests, and data deletion requests should be directed to haybaj's support team using the contact details provided in Section 11 of this Policy.

haybaj collects personal data in the following categories:

3.1 Registration and Account Data

When you create a haybaj account, we collect the information you provide directly, including:

• Full legal name
• Date of birth (to verify you are at least 21 years of age)
• Mobile phone number (used for account verification and communications)
• Email address
• Residential address (city/district within Bangladesh, e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Chosen username and encrypted password

3.2 Identity Verification Data

To comply with our Know Your Customer (KYC) obligations and to confirm player eligibility, haybaj may request copies of:

• National Identity Card (NID)
• Passport or other government-issued photo identification
• Proof of address (utility bill, bank statement, or similar document dated within 90 days)
• Source of funds documentation where required for enhanced due diligence

3.3 Financial and Transaction Data

When you make deposits or request withdrawals, haybaj collects transaction records including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), transaction amounts in Bangladeshi Taka (৳), timestamps, and transaction reference numbers. Raw payment credentials (card numbers, mobile wallet PINs) are never stored on haybaj's servers.

3.4 Gameplay and Betting Data

haybaj records all game activity associated with your account, including bets placed, games accessed (cricket, slots, live casino, crash games, bingo), outcomes, bonus activations, and session durations. This data is used to deliver the Service, resolve disputes, and monitor for responsible gaming compliance.

3.5 Technical and Device Data

When you access haybaj, we automatically collect:

• IP address and approximate geographical location
• Device type, operating system, and browser version
• Session timestamps and duration
• Referring URL (where applicable)
• Cookie identifiers and similar tracking technologies (see Section 7)

3.6 Communications Data

If you contact haybaj's support team, we retain records of your communications, including the content of messages, timestamps, and any attachments submitted. This data is used to resolve your query and improve service quality.

haybaj processes your personal data for the following purposes:

haybaj does not sell or rent your personal data to any third party. We may share your personal data with the following categories of recipients only where necessary and on a need-to-know basis:

• Certified Game Providers: haybaj partners exclusively with certified game studios (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) to deliver games on the platform. Minimum account and session data is shared with these providers solely to enable gameplay functionality.
• Payment Processors: Your transaction data is shared with our PCI-compliant payment processing partners (including bKash, Nagad, Rocket, and card processors) to facilitate deposits and withdrawals. These partners operate under strict data protection obligations.
• Identity Verification Services: Where enhanced KYC checks are required, haybaj may engage accredited identity verification service providers. These providers process verification documents solely for the purpose of confirming player identity and age.
• Legal and Regulatory Authorities: haybaj may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or to protect the rights and safety of haybaj, its players, or the public.
• Fraud Prevention Networks: In cases of suspected fraud, collusive play, or money laundering, haybaj may share relevant account data with fraud prevention and investigation services.

In all cases where personal data is shared with third parties, haybaj ensures that appropriate contractual data protection safeguards are in place. Third parties are prohibited from using your data for any purpose other than the specific purpose for which it was shared.

haybaj retains your personal data for as long as your account remains active and for a defined period thereafter, in line with our legal and operational obligations. Specific retention periods are as follows:

• Account and registration data: Retained for the duration of your account and for a minimum of five years following permanent account closure.
• Transaction and financial records: Retained for a minimum of seven years from the date of each transaction, as required for financial record-keeping purposes.
• Identity verification documents: Retained for the duration of your account and for five years following account closure or the completion of the relevant verification review.
• Gameplay and betting records: Retained for five years following the date of each session or transaction.
• Customer support communications: Retained for three years from the date of the final communication in each support thread.
• Marketing consent records: Retained until you withdraw consent, and for one year thereafter as evidence of your prior consent.

Where personal data is no longer required for the purpose for which it was collected and no legal retention obligation applies, haybaj will securely delete or anonymise that data.

haybaj uses cookies and similar tracking technologies to deliver, maintain, and improve the Service. A cookie is a small text file stored on your device when you visit the haybaj platform. The categories of cookies we use are as follows:

• Essential Cookies: Required for the core operation of the haybaj platform, including maintaining your login session, enabling secure transactions, and storing your account preferences. These cookies cannot be disabled without impairing your ability to use the Service.
• Analytics Cookies: Used to collect anonymised data about how players interact with the haybaj platform — pages visited, features used, and session duration. This information helps haybaj identify technical issues and improve the user experience. No personally identifiable data is included in analytics reports.
• Functionality Cookies: Used to remember your in-platform preferences, such as language settings and display configurations, so that you do not need to reconfigure them on each visit.
• Marketing Cookies: Used only where you have given explicit consent, to deliver relevant promotional communications. You may withdraw consent for marketing cookies at any time via your account settings.

You may manage cookie preferences via your browser settings. Please note that disabling essential cookies will prevent you from accessing certain features of the haybaj platform, including account login and payment processing.

haybaj implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• All data in transit between your device and haybaj's servers is protected by 256-bit SSL/TLS encryption.
• Player passwords are stored using a one-way cryptographic hashing algorithm. haybaj staff cannot view your password in plain text.
• Payment data is handled exclusively by PCI-DSS compliant processors. haybaj does not store raw card numbers or mobile wallet credentials on its infrastructure.
• Access to personal data within haybaj's systems is restricted on a strict need-to-know basis, with role-based access controls and audit logging in place.
• haybaj's servers are hosted in secure data centres with physical access controls, continuous monitoring, and regular security auditing.
• haybaj operates a vulnerability disclosure programme and conducts periodic penetration testing to identify and address security risks proactively.

Whilst haybaj takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying haybaj immediately if you suspect any unauthorised access to your account.

As a haybaj player, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected]. haybaj will respond to all data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data haybaj holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request that haybaj corrects any inaccurate or incomplete personal data held about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to haybaj's legal retention obligations (see Section 6).
• Right to Restriction: You have the right to request that haybaj restricts the processing of your personal data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to haybaj in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where haybaj processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, and without giving any reason.

Please note that certain data rights requests may be subject to identity verification before haybaj can action them, to protect the security of your account and your data.

The haybaj Service is strictly intended for adults aged 21 years and above. haybaj does not knowingly collect personal data from any person under the age of 21. If haybaj becomes aware that an account has been registered by a person under 21, the account will be closed immediately and any personal data collected will be deleted without delay, subject only to any mandatory legal retention obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account with haybaj, please contact us immediately at [email protected] so that the account may be closed and the data removed.

haybaj reserves the right to update or amend this Privacy Policy at any time. Where changes are material, haybaj will notify registered players via the contact details held on their account or via a prominent notice on the platform. The date of the most recent revision is displayed at the top of this page.

Your continued use of the haybaj Service after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must stop using the Service and close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way haybaj processes your personal data, please contact our support team using the details below. All data-related enquiries are handled confidentially.