heyboji Privacy Policy

1. Data We Collect

heyboji collects personal data from you in several ways: directly when you register an account or interact with our platform, automatically when you browse or use our services, and from trusted third-party sources where necessary for verification and fraud prevention purposes. The categories of personal data we collect are described below.

1.1 Registration and Account Data

When you create a heyboji account, we collect your full legal name, date of birth, email address, Bangladesh mobile phone number, and a username of your choosing. This information is required to establish your account, verify your identity, and communicate with you about your account activity. Without this data, we are unable to provide you with access to heyboji's real-money gaming and betting services.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance obligations, heyboji may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or birth certificate. We may also collect proof of address documents such as a recent utility bill, bank statement, or mobile wallet transaction record. Where required, we collect proof of payment method ownership. These documents are collected solely for the purposes of identity verification, age confirmation, and anti-money laundering compliance.

1.3 Financial and Transaction Data

heyboji collects details of all deposits, withdrawals, and in-platform transactions associated with your account. This includes the payment method used (e.g., bKash, Nagad, Rocket, Visa, Mastercard), transaction amounts in Bangladeshi Taka (BDT), transaction timestamps, and reference numbers. We do not store full card numbers or mobile wallet PINs. Payment method tokenisation is handled by our PCI-compliant payment processing partners.

1.4 Gameplay and Betting Data

heyboji records all game sessions, bets placed, wagers settled, bonus activity, and gaming history associated with your account. This data is used to calculate winnings and payouts, resolve disputes, enforce bonus terms, comply with our responsible gaming obligations, and improve the quality of our platform and game offerings.

1.5 Technical and Usage Data

When you visit the heyboji website or use our platform, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time spent on each page, and click-path data. This information is collected via cookies and server logs and is used to maintain platform security, diagnose technical issues, and improve the overall user experience.

1.6 Communications Data

When you contact heyboji's support team via email, live chat, or any other channel, we retain a record of that communication, including the content of your messages, any attachments you provide, and the date and time of each interaction. This data is used to resolve your queries, train our support staff, and maintain a record of any dispute or complaint for compliance purposes.

2. How We Use Your Data

heyboji uses the personal data we collect for the following purposes. We rely on one or more lawful bases for each use, as described below.

Purpose	Data Used	Lawful Basis
Creating and managing your player account	Registration data, KYC documents	Contract performance
Processing deposits and withdrawals	Financial and transaction data	Contract performance
Age and identity verification	KYC data, registration data	Legal obligation
Anti-money laundering (AML) monitoring	Transaction data, KYC data	Legal obligation
Responsible gaming monitoring and intervention	Gameplay data, account data	Legal obligation / legitimate interest
Fraud detection and platform security	Technical data, transaction data	Legitimate interest
Customer support and dispute resolution	Communications data, account data	Contract performance / legitimate interest
Platform performance and improvement	Technical and usage data (aggregated)	Legitimate interest
Sending account-related notifications	Email address, mobile number	Contract performance
Sending promotional offers (where opted in)	Email address, gameplay preferences	Consent

2.1 Marketing Communications

heyboji will only send you promotional emails, SMS messages, or push notifications about bonuses, new games, or special offers if you have explicitly opted in to receive such communications during registration or in your account settings. You may withdraw your consent to marketing communications at any time by updating your preferences in the heyboji account settings page or by contacting our support team. Opting out of marketing communications does not affect your receipt of essential account-related notifications such as transaction confirmations, security alerts, or KYC requests.

2.2 Automated Decision-Making

heyboji uses automated systems to monitor gameplay patterns and transaction behaviour for the purposes of fraud detection, AML compliance, and responsible gaming intervention. In certain cases, these systems may result in automated actions such as temporary account holds or withdrawal delays. Where an automated decision materially affects you, you have the right to request human review of that decision by contacting our support team at [email protected].

3. Data Sharing & Disclosure

heyboji does not sell, rent, or trade your personal data to third-party marketers. We share your data only in the circumstances described below, and only to the extent necessary for the specified purpose.

3.1 Game and Platform Technology Providers

heyboji's casino games are powered by third-party providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. When you play a game provided by one of these studios, your gameplay session data — including bets placed and game outcomes — is processed by that provider's systems. All game providers operating on heyboji are bound by strict data processing agreements and are required to maintain data security standards consistent with this Privacy Policy.

3.2 Payment Processing Partners

To process deposits and withdrawals, heyboji shares necessary transaction data with our payment processing partners, which include mobile financial services providers (bKash, Nagad, Rocket, Upay) and card payment processors (Visa, Mastercard). Data shared with payment partners is limited to the minimum required to execute and verify the transaction and is governed by the respective payment partner's own privacy and data protection policies.

3.3 Identity Verification Services

heyboji may use third-party identity verification and KYC service providers to assist in the verification of player identity documents and age confirmation. Any identity data shared with these providers is transmitted securely and used solely for the purpose of completing the verification check. These providers are contractually prohibited from using your data for any other purpose.

3.4 Legal and Regulatory Disclosure

heyboji may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are legally required to do so, where we receive a valid legal request, or where disclosure is necessary to protect heyboji's legal rights, prevent fraud, or protect the safety of our players or the public. In such cases, heyboji will disclose only the minimum data required to satisfy the legal obligation.

3.5 Business Transfers

In the event that heyboji undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any resulting changes to this Privacy Policy via your registered email address prior to the transfer taking effect.

4. Cookies & Tracking

heyboji uses cookies and similar technologies (including local storage and session tokens) to operate and improve the platform. The following table describes the categories of cookies we use and their purpose.

Cookie Type	Purpose	Duration
Essential cookies	Required for the platform to function — session management, login authentication, security tokens	Session / up to 24 hours
Preference cookies	Remember your display preferences, selected language, and odds format settings	Up to 12 months
Analytics cookies	Collect aggregate, anonymised usage data to help heyboji understand how players navigate the platform and identify areas for improvement	Up to 24 months
Security cookies	Detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts	Session / up to 30 days

4.1 Third-Party Cookies

heyboji does not permit third-party advertising networks to place cookies on our platform. Analytics data collected via cookies is processed in aggregate and anonymised form only — no individually identifiable user data is shared with analytics service providers beyond what is necessary to generate aggregated platform performance reports.

4.2 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies will impair the functionality of the heyboji platform and may prevent you from logging in or completing transactions. Disabling preference or analytics cookies will not affect your ability to use core platform features.

5. Data Security

heyboji takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

5.1 Technical Security Measures

All data in transit between your device and heyboji's servers is protected by TLS 1.2 or higher encryption. Personal data stored on heyboji's servers — including identity documents, KYC records, and financial data — is encrypted at rest using AES-256. heyboji's production infrastructure is hosted in secure data centres with access controls, continuous monitoring, and regular penetration testing by independent security professionals.

5.2 Organisational Security Measures

Access to personal data within heyboji is granted on a strict need-to-know basis. All staff who handle personal data are subject to confidentiality obligations and receive regular training on data protection best practices. heyboji maintains an internal data breach response procedure and will notify affected players and relevant authorities of any material data breach within the timeframes required by applicable law.

5.3 Player Responsibility

While heyboji implements robust security measures on our side, the security of your heyboji account also depends on the steps you take to protect your login credentials. You are responsible for keeping your password confidential, not sharing your account with third parties, and notifying heyboji immediately if you suspect your account has been compromised. heyboji recommends enabling two-factor authentication (2FA) on your account for an additional layer of protection.

6. Data Retention

heyboji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods.

6.1 Active Account Data

While your heyboji account remains active, we retain all account data, KYC documents, transaction records, and gameplay history associated with your account. This data is necessary for the ongoing provision of our services, dispute resolution, and regulatory compliance.

6.2 Post-Closure Retention

Following the closure of your heyboji account — whether initiated by you or by heyboji — we are required by our AML and financial services compliance obligations to retain your identity verification documents and transaction records for a minimum period of five years from the date of account closure. After this retention period expires, your data will be securely deleted or anonymised in accordance with our data disposal procedures.

6.3 Communications and Support Records

Records of customer support interactions and dispute correspondence are retained for a period of three years following the resolution of the relevant matter, or for the duration of any related legal proceeding, whichever is longer. After this period, communications data is securely deleted.

6.4 Marketing Data

If you have consented to receive marketing communications from heyboji, we retain your marketing preferences and the associated contact data until you withdraw your consent. Upon withdrawal of consent, we will cease sending marketing communications and remove your details from our active marketing lists within 10 business days. A suppression record may be retained indefinitely to ensure we honour your opt-out preference.

7. Your Privacy Rights

As a heyboji player, you have a number of rights with respect to the personal data we hold about you. heyboji is committed to facilitating the exercise of these rights in a timely and transparent manner.

• Right of Access: You have the right to request a copy of the personal data heyboji holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request that heyboji delete your personal data. This right is subject to limitations where we are required to retain data for legal or regulatory compliance purposes.
• Right to Restriction: You may request that heyboji restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: Where data processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to heyboji's processing of your personal data where that processing is based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where heyboji processes your data based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact heyboji's support team at [email protected] with the subject line "Privacy Rights Request" and your registered account email address. heyboji will respond to all verified privacy rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, and you will be informed of any such extension.

8. Contact & Updates

8.1 Privacy Contact

If you have any questions, concerns, or complaints regarding heyboji's handling of your personal data, or if you wish to exercise any of your privacy rights, please contact our data protection team by email. Our support team can be reached at [email protected]. Please include "Privacy Policy" in the subject line of your email so that your query is routed to the appropriate team member promptly.

8.2 Changes to This Policy

heyboji reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. Where changes are material — meaning they affect the type of data we collect, the purposes for which we use it, or your rights as a data subject — we will notify registered players via their registered email address at least 14 days before the changes take effect. The updated policy will always be available in full at https://heyboji.net/privacy-policy, with the date of the most recent revision displayed at the top of the page.

8.3 Children's Privacy

heyboji's platform is strictly for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If heyboji becomes aware that a player account has been created by a person under 18, the account will be immediately closed, all data associated with it will be deleted (subject to any mandatory legal retention requirements), and any deposited funds will be returned via the original payment method. If you have reason to believe that a minor has registered a heyboji account, please notify us immediately at [email protected].

8.4 Links to Third-Party Sites

The heyboji platform does not contain links to third-party websites. However, where game provider interfaces are embedded within our platform, those providers' own privacy policies govern the data processing conducted within their respective game environments. heyboji is not responsible for the privacy practices of third-party game providers beyond the data processing agreements we maintain with each provider.

8.5 Governing Law

This Privacy Policy is governed by and construed in accordance with applicable international data protection principles and the internal compliance standards maintained by heyboji. Any dispute arising from or in connection with this Privacy Policy that cannot be resolved informally shall be referred to binding arbitration in accordance with the dispute resolution provisions set out in heyboji's Terms & Conditions.