hay bhaji Privacy Policy
At hay bhaji, your privacy is a fundamental commitment — not an afterthought. This Privacy Policy explains exactly what personal data we collect from Bangladesh players, how we use it, who we share it with, and the controls you have over your own information. We handle every piece of data you entrust to us with care and in accordance with applicable data protection principles.
We Never Sell Your Data
hay bhaji does not sell, rent or trade your personal information to any third party for their own marketing purposes. Your data is used solely to operate and improve the hay bhaji Service.
256-Bit SSL Encryption
All data transmitted between your device and hay bhaji servers is protected by industry-standard 256-bit SSL encryption. Your financial details and personal information travel securely.
Bangladesh Payment Privacy
Transaction data processed through bKash, Nagad, Rocket and other Bangladesh payment methods is handled in strict accordance with the data protection policies of those providers.
You Control Your Data
Registered hay bhaji players have the right to access, correct, export or request deletion of their personal data. Submit a request any time via our live chat or email support channel.
Clear Retention Limits
hay bhaji retains personal data only for as long as necessary to provide the Service and meet legal obligations. Detailed retention periods for each data category are published in this policy.
Transparent Cookie Use
This policy explains every category of cookie and tracking technology used on hay bhaji — including analytics, security, and performance cookies — along with guidance on managing your preferences.
1. Data We Collect
hay bhaji collects personal data from players through a number of channels: directly from you when you register an account, make a deposit or contact our support team; automatically through your use of our website and applications; and from trusted third-party sources such as payment processors, identity verification providers and fraud detection services. The specific categories of data we collect are described below.
1.1 Registration & Identity Data
When you create a hay bhaji account, we collect the information you provide in the registration form, which includes:
- Full legal name (as it appears on your government-issued ID).
- Date of birth (for age verification — players must be 18 or older).
- Email address and mobile phone number.
- Residential address, including district and division within Bangladesh.
- Username and encrypted password (we never store passwords in plain text).
- Copies of identity documents (Bangladesh National Identity Card, passport or other government-issued ID) submitted during the KYC verification process.
1.2 Financial & Transaction Data
To process your deposits and withdrawals, hay bhaji collects and retains records of all financial transactions associated with your account. This includes:
- Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers) — partial references only; hay bhaji does not store full mobile wallet credentials.
- Bank account details provided for bank transfer withdrawals.
- Deposit and withdrawal amounts, timestamps, and reference numbers.
- Source-of-funds documentation submitted in response to anti-money-laundering requests.
- Any chargebacks, disputes or fraud flags associated with payment transactions.
1.3 Gaming & Behavioural Data
hay bhaji records detailed logs of your activity on the platform in order to operate the Service, detect fraud, enforce responsible gaming limits and improve the overall player experience. This data includes:
- Games played, bet amounts, wager outcomes and session durations.
- Sports markets browsed and wagers placed, including BPL, IPL, T20 World Cup and other cricket fixtures.
- Bonus offers claimed, wagering progress and promotional participation history.
- Responsible gaming tool usage — deposit limits set, session reminders activated, self-exclusion requests submitted.
- Customer support interaction history, including live chat transcripts and WhatsApp message logs.
- Login history, including timestamps and geographic indicators derived from IP address.
1.4 Technical & Device Data
When you access hay bhaji through a browser or mobile device, we automatically collect certain technical data, including:
- IP address and approximate location derived from IP (city/region level — not precise GPS coordinates).
- Device type, operating system version, browser type and version.
- Device fingerprint data used for fraud detection and duplicate account identification.
- Pages visited, features used, time spent on each section, and navigation path through the platform.
- Referral source — how you arrived at hay-bhaji.com (e.g., direct navigation, search engine, referral link).
- Error logs and crash reports generated during your use of the platform.
📌 Data Minimisation Principle: hay bhaji collects only the personal data that is genuinely necessary for the purposes set out in this Privacy Policy. We do not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric data, except where age verification technology requires a facial liveness check — in which case that biometric data is processed solely by our third-party verification provider and is not retained by hay bhaji.
2. How We Use Your Data
hay bhaji uses the personal data we collect for specific, clearly defined purposes. We do not use your data for any purpose incompatible with the reasons for which it was originally collected. The primary purposes for which we process your personal information are as follows:
| Purpose | Data Categories Used | Details |
|---|---|---|
| Account Registration & Management | Identity, Contact, Login Data | Creating and maintaining your hay bhaji account, authenticating your identity on login, and managing account settings. |
| Age & Identity Verification | Identity, Document Data | Verifying that you are aged 18 or above and confirming your identity as required before processing withdrawals or responding to account queries. |
| Payment Processing | Financial, Transaction Data | Processing deposits and withdrawals via bKash, Nagad, Rocket, bank transfer and other supported Bangladesh payment methods. |
| Game & Betting Service Delivery | Gaming, Behavioural Data | Operating the cricket betting, live casino, slots and other gaming products you access on hay bhaji. |
| Fraud Prevention & Security | Technical, Device, Financial Data | Detecting and preventing duplicate accounts, bonus abuse, money laundering, stolen payment methods, and unauthorised account access. |
| Responsible Gaming | Gaming, Behavioural, Financial Data | Monitoring play patterns for signs of problem gambling, enforcing self-exclusion requests, and applying deposit and loss limits set by the player. |
| Customer Support | Identity, Interaction History | Responding to queries via live chat, WhatsApp and email, and maintaining interaction records to ensure continuity of support. |
| Marketing & Promotions | Identity, Behavioural, Contact Data | Sending relevant promotional offers, bonus notifications and seasonal promotions (e.g., BPL, Eid, Pohela Boishakh) to opted-in players. You may opt out at any time. |
| Platform Analytics & Improvement | Technical, Behavioural Data | Analysing aggregated usage patterns to improve platform performance, user interface design, game offering and customer experience. |
| Legal & Regulatory Compliance | All categories as required | Meeting obligations under applicable anti-money-laundering rules, responding to lawful requests from competent authorities, and defending legal claims. |
2.1 Marketing Communications
hay bhaji will only send you direct marketing communications — including promotional emails, SMS messages and WhatsApp notifications — if you have opted in to receive them during registration or through your account settings. Each marketing message includes a clear, easy-to-use opt-out mechanism. If you opt out of marketing communications, you will continue to receive transactional and service-related messages such as deposit confirmations, withdrawal notifications and security alerts — these are necessary for the operation of your account and cannot be disabled while your account is active.
3. Legal Basis for Processing
hay bhaji processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:
- Contractual Necessity: Processing is necessary to perform the contract between you and hay bhaji — i.e., to operate your account, process your deposits and withdrawals, and deliver the gaming and betting services you have registered to use.
- Legal Obligation: Processing is necessary for hay bhaji to comply with applicable legal obligations, including anti-money-laundering requirements, age verification duties, and lawful orders from competent authorities.
- Legitimate Interests: Processing is necessary for hay bhaji's legitimate business interests — including fraud prevention, platform security, duplicate account detection, and business analytics — provided those interests are not overridden by your data protection rights.
- Consent: Where processing is based on your consent — primarily for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing does not affect your account status or your ability to use hay bhaji services.
⚠️ Note on Age Restriction: The processing of your date of birth and identity documents for age verification purposes is a legal obligation under hay bhaji's commitment to preventing underage gambling. This processing cannot be refused or restricted by the player — it is a non-negotiable condition of account registration and continued access to the Service. hay bhaji does not permit players under 18 years of age to register or maintain accounts.
4. Data Sharing & Third Parties
hay bhaji does not sell, rent or trade your personal data. We share your information only with carefully selected third-party service providers and in the limited circumstances described below. All third parties with whom hay bhaji shares personal data are required to process that data only for the specific purpose for which it was shared and in accordance with applicable data protection standards.
4.1 Payment Processors
To process your deposits and withdrawals, hay bhaji shares the minimum necessary payment information with our payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank and international card processors Visa and Mastercard. These providers operate under their own privacy policies and are subject to applicable Bangladesh financial services regulations. hay bhaji does not receive or store full card numbers or mobile wallet PINs — only transaction references and partial identifiers needed to reconcile payments.
4.2 Identity Verification Providers
hay bhaji uses a third-party KYC (Know Your Customer) and age verification service to check the validity of identity documents submitted during account registration and prior to withdrawal processing. Your identity document images and verification data are transmitted securely to this provider for the sole purpose of identity and age verification. This provider does not use your data for any other purpose.
4.3 Game Technology Providers
The casino games and live dealer tables available on hay bhaji are powered by licensed game studio partners including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe and Ezugi. These providers may receive limited gameplay data — such as bet amounts and game results — necessary for the technical operation of their games. They do not receive your full name, contact details or payment information.
4.4 Fraud Prevention & Security Services
hay bhaji uses specialist third-party fraud detection and device fingerprinting services to identify suspicious account activity, duplicate registrations and fraudulent payment patterns. These services process technical and device data such as IP addresses, device identifiers and behavioural signals. They do not receive payment card details or government ID information.
4.5 Legal & Regulatory Disclosure
hay bhaji may disclose your personal data to competent legal authorities, law enforcement agencies or regulatory bodies where required to do so by applicable law, court order or regulatory direction. We will notify you of any such disclosure where legally permitted to do so. hay bhaji will not disclose your data to third parties for purposes beyond those described in this policy without your prior explicit consent, except where required by law.
📌 No Data Sales: hay bhaji has never sold personal data belonging to its players and has no intention of doing so. If this policy is ever amended to permit data sales, affected players will be notified in advance and given a clear opportunity to object before any such transfer takes place.
5. Cookies & Tracking Technologies
hay bhaji uses cookies and similar tracking technologies — including local storage, session tokens and pixel tags — to operate the platform, maintain session security, analyse usage and, where you have consented, deliver relevant promotional content. This section explains each category of cookie we use and how you can manage your preferences.
5.1 Cookie Categories
| Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session authentication, login state, security tokens, fraud prevention, responsible gaming enforcement. Without these cookies, the hay bhaji platform cannot function. | No — essential for Service operation. |
| Functional | Remembering your language and display preferences, storing your preferred deposit method, and personalising the platform layout based on your past usage. | Yes — disabling may reduce personalisation. |
| Analytics & Performance | Measuring page load times, identifying navigation bottlenecks, tracking which features are most used, and generating aggregated usage reports to guide platform improvement. | Yes — opt out via account settings. |
| Marketing & Retargeting | Tracking which promotional pages you visited to deliver relevant bonus offers and seasonal promotions. Used only if you have opted in to marketing communications. | Yes — opt out via account settings or marketing preference centre. |
5.2 Managing Cookies
You can manage your cookie preferences through your hay bhaji account settings at any time. You may also control cookies through your browser settings — most modern browsers allow you to block or delete cookies for specific domains. Please note that blocking strictly necessary cookies will prevent you from logging into your hay bhaji account and using core platform features. Deleting cookies will log you out of your current session and may require re-authentication on your next visit.
hay bhaji does not use cookies or tracking pixels to follow your activity on third-party websites unrelated to our Service. Our tracking technologies are limited to your activity within the hay-bhaji.com domain.
6. Data Retention
hay bhaji retains your personal data for the minimum period necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention obligations. The retention periods for the principal categories of personal data we hold are set out in the table below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 7 years after closure | Anti-money-laundering obligations and legal record-keeping requirements. |
| Financial & Transaction Records | 7 years from transaction date | Compliance with financial regulations and potential dispute resolution. |
| KYC / Identity Documents | Duration of account + 5 years after closure | Regulatory requirement to retain verification records. |
| Gaming & Betting History | Duration of account + 3 years after closure | Dispute resolution, responsible gaming monitoring, and fraud investigation. |
| Customer Support Records | 3 years from interaction date | Quality assurance, dispute resolution and legal claims. |
| Technical & Device Logs | 12 months from log creation | Security monitoring, fraud detection and platform performance analysis. |
| Marketing Preferences & Opt-In Records | Duration of consent + 3 years | Evidence of consent in case of regulatory query. |
| Self-Exclusion Records | Duration of exclusion + 7 years | Preventing re-registration during exclusion period and protecting vulnerable players. |
When the applicable retention period expires, hay bhaji will securely delete or anonymise the relevant personal data. Anonymised, aggregated data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes.
6.1 Inactive Accounts
If your hay bhaji account shows no login or transaction activity for a continuous period of 24 months, your account will be designated as inactive. hay bhaji will notify you at your registered email address before any changes are made to your account or data as a result of inactivity. Inactive account data is retained in accordance with the retention periods set out above — inactivity does not trigger early deletion of data subject to legal retention obligations.
7. Your Privacy Rights
As a hay bhaji player, you have the following rights in relation to your personal data. These rights can be exercised at any time by contacting our privacy support team via live chat or by email at [email protected]. hay bhaji will respond to all valid privacy rights requests within 30 calendar days of receipt.
- Right of Access: You may request a copy of all personal data that hay bhaji holds about you. We will provide this in a structured, commonly used and machine-readable format where feasible.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For name or date of birth corrections, we will require supporting documentation to verify the amendment.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and we have no legal obligation to retain it. Please note that hay bhaji is subject to mandatory retention obligations for transaction and identity data — deletion requests cannot override these legal obligations.
- Right to Restrict Processing: In certain circumstances — for example, while you are contesting the accuracy of data we hold — you may request that we restrict the processing of your personal data to storage only, pending resolution of the dispute.
- Right to Data Portability: You may request that hay bhaji provide your personal data in a portable format so that you can transfer it to another service provider, where technically feasible and where the processing is based on consent or contractual necessity.
- Right to Object: You may object to the processing of your personal data where it is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You have an unconditional right to object to direct marketing processing at any time.
- Right to Withdraw Consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
⚠️ Identity Verification for Rights Requests: To protect your privacy, hay bhaji will verify your identity before processing any data rights request. We may request a copy of your government-issued ID and ask you to confirm account details. This verification step is mandatory and cannot be waived — it prevents unauthorised third parties from accessing or deleting another player's data.
8. Data Security Measures
hay bhaji implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. Our security framework includes the following layers of protection:
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and hay bhaji servers is encrypted using TLS 1.2 or higher. This applies to account login, deposit and withdrawal flows, form submissions and all other data exchanges.
- Encrypted Data Storage: Sensitive fields — including passwords, payment identifiers and identity document references — are stored using strong one-way hashing or encryption algorithms. Passwords are never stored in plain text.
- Two-Factor Authentication (2FA): hay bhaji offers SMS-based two-factor authentication for all account holders. Players are strongly encouraged to enable 2FA to protect against unauthorised login attempts.
- Access Controls: Access to player personal data within hay bhaji's internal systems is restricted to staff with a genuine operational need. Access is governed by role-based permissions and is subject to audit logging.
- Penetration Testing: The hay bhaji platform undergoes regular security assessments, including penetration testing by independent security professionals, to identify and remediate vulnerabilities before they can be exploited.
- Fraud Detection Systems: Real-time automated systems monitor login activity, transaction patterns and device fingerprints for indicators of account compromise, fraudulent deposits and unauthorised access.
- Incident Response: hay bhaji maintains a documented data breach response procedure. In the event of a data breach that poses a risk to player rights and freedoms, we will notify affected players promptly and take all necessary steps to contain and remediate the incident.
While hay bhaji takes all reasonable precautions to secure your personal data, no internet-connected platform can guarantee absolute security. Players are responsible for maintaining the security of their own devices and ensuring that they use strong, unique passwords for their hay bhaji accounts. If you suspect your account has been compromised, contact our support team via live chat immediately.
9. Updates to This Policy
hay bhaji may update this Privacy Policy from time to time to reflect changes in how we handle personal data, changes to the services we offer, or updates to applicable legal requirements. When material changes are made — such as changes to the categories of data we collect, new third-party data sharing arrangements, or changes to your privacy rights — we will notify registered players via their registered email address at least 14 days before the updated policy takes effect.
Minor amendments — such as clarifications of existing provisions, corrections of typographical errors, or updates reflecting changes in payment provider availability — may be made without advance notification. The effective date at the top of this page will always reflect when the policy was last updated.
Continued use of the hay bhaji Service following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you disagree with any material change to this policy, you should cease using the Service and may request account closure in accordance with the Terms & Conditions. Your personal data will be retained following closure in accordance with the retention periods set out in Section 6 of this policy.
9.1 Version History
A summary of the material changes made in each published version of this Privacy Policy is available on request by contacting our privacy support team. We maintain version records for a minimum of 5 years to ensure accountability and transparency in how our data practices have evolved over time.
10. Contact Our Privacy Team
If you have any questions, concerns or requests relating to this Privacy Policy or the way hay bhaji handles your personal data, please contact our dedicated privacy support team through any of the following channels:
- Live Chat: Available 24/7 directly within the hay bhaji platform. Average response time is 2–5 minutes. This is the fastest channel for privacy queries.
- WhatsApp: Our support team is available on WhatsApp 24 hours a day, 7 days a week, including Bangladesh public holidays.
- Email: [email protected] — please note this address is monitored during Bangladesh Standard Time (BST, UTC+6) business hours. For urgent matters, live chat is recommended.
When submitting a privacy rights request, please include your registered email address, a description of your request and, where applicable, the specific data categories or time periods your request relates to. This will help us process your request efficiently. hay bhaji will acknowledge receipt of all privacy requests within 2 business days and will complete processing within 30 calendar days of the date of receipt, except in cases of unusual complexity requiring an extension.
📋 Data Controller: For the purposes of applicable data protection law, the data controller responsible for your personal data is hay bhaji, operating the platform at hay-bhaji.com and serving players in Bangladesh. All data rights requests, privacy queries and concerns should be directed to the support contact details above.
How hay bhaji Protects Your Privacy
Six commitments that define how we handle your personal data as a Bangladesh player on our platform.
Every byte of data you transmit to hay bhaji — from login credentials to deposit details — travels over an encrypted TLS connection. Our 256-bit SSL certificate is always active, always verified.
hay bhaji has never sold player data and will never do so. Your personal information exists to deliver and improve your experience on our platform — nothing else. We do not share it with advertisers or data brokers.
Access, correct, export or request deletion of your personal data at any time. Our privacy team responds within 30 days to all valid requests. No complicated forms — just contact us via live chat.
Transaction data processed via Bangladesh mobile financial services is handled with the same rigorous privacy standards as all hay bhaji data. We store only partial payment references — never full wallet credentials.
When this Privacy Policy is materially updated, registered hay bhaji players are notified by email at least 14 days before changes take effect — giving you time to review what has changed and decide accordingly.
hay bhaji commissions independent penetration testing and security reviews on a regular basis. Vulnerabilities are remediated before deployment. Our infrastructure is monitored 24/7 for anomalous access patterns.
Your Privacy Is Protected — Now Let's Play
Now that you know how hay bhaji protects your personal data, explore the full platform — cricket betting, live casino tables, jackpot slots and exclusive promotions. For players aged 18 and above only.