haybaij Privacy Policy

Section 1

Introduction

This Privacy Policy ("Policy") describes how haybaij ("haybaij", "we", "us", or "our") collects, uses, stores, and discloses personal information obtained from users ("you", "the Player") of the haybaij website located at haybaij.net and all associated platform services (collectively, the "Platform"). This Policy applies to all visitors, registered players, and any other individuals who interact with the Platform in any capacity.

By creating an account, making a deposit, placing a bet, or otherwise accessing the Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree with any part of this Policy, you should immediately discontinue your use of the Platform.

1.1 Policy Updates

haybaij reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or operational requirements. When material changes are made, we will publish the revised Policy on the Platform with an updated effective date. We encourage you to review this Policy periodically. Continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms.

1.2 Age Restriction and Data of Minors

The haybaij Platform is strictly for adults aged 18 years and above. We do not knowingly collect personal data from persons under the age of 18. If we become aware that personal data has been submitted by a minor, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe a minor has submitted data to haybaij should contact us immediately at [email protected].

Section 2

Data We Collect

haybaij collects personal data through several channels: directly from you when you register or use the Platform, automatically through your use of the Platform, and in limited cases from third-party sources where necessary to fulfil our legal obligations. The categories of data we collect are described below.

2.1 Registration and Account Data

When you register an account on haybaij, we collect the following personal data:

• Full legal name
• Date of birth
• Email address
• Mobile phone number (Bangladesh registered)
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other)
• Username and encrypted password hash
• Preferred currency (Bangladeshi Taka, ৳ BDT)

2.2 Identity Verification (KYC) Data

As part of our mandatory Know Your Customer process, we may collect:

• Copies of government-issued identity documents (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements)
• Payment method verification documents (bKash, Nagad, Rocket, or Upay account screenshots)
• Source of funds documentation for high-value accounts

2.3 Financial Transaction Data

We collect data related to your financial activity on the Platform, including:

• Deposit and withdrawal amounts and timestamps
• Payment method type (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard)
• Transaction reference numbers
• Account balance history

2.4 Gaming and Betting Activity Data

We record data related to your use of games and betting markets on the Platform, including:

• Game sessions, bet placement history, and wager amounts
• Sports betting selections (cricket, football, kabaddi, and other markets)
• Win and loss records
• Bonus and promotion participation history
• Responsible gaming tool usage (deposit limits, session reminders, self-exclusion requests)

2.5 Technical and Device Data

When you access the Platform, our servers automatically collect certain technical data:

2.6 Communications Data

When you contact haybaij support via email, live chat, or any other channel, we retain records of those communications including your name, contact details, the content of your enquiry, and our response. This data is used to resolve your query, improve our support quality, and maintain a record of any complaints or escalations.

Section 3

How We Use Your Data

haybaij processes personal data only where we have a lawful basis for doing so. The primary legal bases we rely on are: the performance of our contract with you (operating your account and processing transactions), compliance with legal obligations (KYC, AML, age verification), our legitimate interests as a business (fraud prevention, platform security, and analytics), and in limited cases your explicit consent (marketing communications).

3.1 Account Management and Service Delivery

• Creating, maintaining, and operating your haybaij player account
• Processing your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfers
• Verifying your identity and age as part of the KYC process
• Providing access to sports betting markets, live casino games, and slots
• Processing bonus and promotion claims and tracking wagering requirements
• Delivering customer support in English via email and live chat

3.2 Legal and Regulatory Compliance

• Conducting anti-money laundering (AML) checks and reporting suspicious activity where required
• Enforcing our 18+ age restriction and responding to underage gambling concerns
• Responding to lawful requests from regulatory, law enforcement, or judicial authorities
• Maintaining financial records for the minimum statutory retention period

3.3 Security and Fraud Prevention

• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, and multi-accounting
• Monitoring for unusual betting patterns that may indicate match-fixing or insider activity
• Protecting the integrity of the Platform and the security of all player accounts

3.4 Platform Improvement and Analytics

• Analysing aggregated, anonymised usage data to improve Platform performance and user experience
• Conducting A/B testing on Platform features to optimise the player journey
• Monitoring server performance and resolving technical issues

3.5 Marketing Communications

With your explicit consent, haybaij may send you promotional communications by email regarding new games, seasonal offers (such as BPL, IPL, T20 World Cup promotions, Eid bonuses, or Pohela Boishakh specials), and platform updates. You may withdraw your consent to marketing communications at any time by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Section 4

Cookies & Tracking

haybaij uses cookies and similar tracking technologies on its Platform to ensure core functionality, enhance your experience, and support security and analytics operations. A cookie is a small text file placed on your device by a web server. Cookies cannot execute programs or deliver viruses to your device.

4.1 Types of Cookies We Use

4.2 Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. You may manage functional and analytics cookies through your browser's cookie settings. Please be aware that disabling certain cookies may affect the functionality of the Platform — for example, your session may not persist correctly across pages if session cookies are blocked.

Most modern browsers (Chrome, Firefox, Edge, Safari) provide controls to view, delete, and block cookies. Instructions are available in each browser's help documentation. For mobile browsers commonly used in Bangladesh (including Chrome for Android and Samsung Internet), cookie controls are typically found under Settings → Privacy or Settings → Site Settings.

Section 5

Data Sharing

haybaij does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each specific purpose.

5.1 Service Providers and Data Processors

haybaij engages trusted third-party service providers who process personal data on our behalf, subject to strict contractual data processing agreements. These providers include:

• Payment processors — to facilitate transactions via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These providers receive only the data required to process your specific transaction.
• KYC and identity verification providers — to verify your identity documents and screen against sanctions and politically exposed persons (PEP) lists.
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to deliver game content. They do not receive your full personal profile.
• Platform analytics providers — to process aggregated, anonymised usage data for platform performance monitoring.
• Fraud detection and cybersecurity providers — to protect the Platform and its players from fraud, account takeover, and other security threats.

5.2 Legal Disclosures

haybaij may disclose personal data to regulatory, law enforcement, judicial, or government authorities where required to do so by applicable law, court order, or regulatory obligation. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permitted, notify the affected player of the disclosure.

5.3 Business Transfers

In the event that haybaij undergoes a corporate restructuring, merger, acquisition, or sale of assets, player data may be transferred to the successor entity as part of that transaction. In such circumstances, haybaij will ensure that the receiving entity is bound by data protection obligations at least equivalent to those set out in this Policy, and will notify players of the change via the email address registered to their account.

Section 6

Data Security

haybaij takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, alteration, or disclosure.

6.1 Technical Security Measures

• 256-bit SSL/TLS encryption for all data in transit between your device and haybaij servers
• AES-256 encryption for sensitive data stored in our databases, including identity document copies and financial records
• Password hashing using industry-standard one-way cryptographic algorithms — haybaij staff cannot read your password in plain text
• Two-factor authentication (2FA) available to all registered players for additional account security
• Web Application Firewall (WAF) and DDoS mitigation systems to protect the Platform from network-level attacks
• Intrusion detection systems that continuously monitor server activity for anomalous behaviour
• Regular security audits and penetration testing conducted by independent cybersecurity professionals

6.2 Organisational Security Measures

• Access to personal data is restricted on a strict need-to-know basis — only authorised haybaij staff with a legitimate operational reason may access player data
• All staff with access to personal data undergo data protection training and are bound by confidentiality obligations
• Third-party service providers are vetted for security compliance before being engaged and are subject to contractual data protection requirements

6.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, haybaij will take immediate steps to contain the breach, assess the scope and impact, and notify affected players without undue delay. Notifications will be sent to the email address registered to your account and will include a description of the nature of the breach, the categories of data affected, and the steps haybaij is taking in response.

Section 7

Your Rights

As a player on the haybaij Platform, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Data Rights Request". We will respond to all verified data rights requests within 30 calendar days.

7.1 Data Retention

haybaij retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. As a general guide:

• Active account data — retained for the duration of your account plus 5 years following account closure
• Financial transaction records — retained for a minimum of 7 years from the date of each transaction in accordance with financial record-keeping obligations
• KYC identity documents — retained for 5 years following account closure
• Support communications — retained for 3 years from the date of the interaction
• Marketing consent records — retained until consent is withdrawn, plus 3 years for audit purposes

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (which can no longer be linked to you as an individual) may be retained indefinitely for aggregated analytics purposes.

Section 8

Contact & DPO

If you have any questions, concerns, or requests relating to this Privacy Policy or the way haybaij handles your personal data, please contact our data protection team using the details below. We are committed to addressing all privacy-related enquiries promptly and thoroughly.

8.1 Complaints

If you are unsatisfied with haybaij's response to a privacy concern or data rights request, you have the right to escalate your complaint. We recommend the following escalation path:

1. First, contact haybaij directly at [email protected] and allow up to 30 calendar days for a full response.
2. If you remain dissatisfied after receiving our response, you may escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.
3. For players in Bangladesh, you may also seek independent legal advice regarding your data protection rights.

haybaij takes all privacy complaints seriously. Every formal complaint received is logged, investigated by a senior member of our data protection team, and responded to in writing. We treat privacy complaints as an opportunity to identify and correct gaps in our data handling practices.