heynaji Privacy Policy — Your Data, Your Rights

1 Information We Collect

heynaji collects personal data from you only when it is necessary to operate the platform, verify your identity, process transactions, and comply with our legal obligations. We do not collect data beyond what is reasonably required for these purposes. The categories of information we collect include the following:

1.1 Registration Data

When you create a heynaji account, you are required to provide certain mandatory information, including your full legal name, date of birth, residential address, mobile phone number, and email address. This information is used to create and administer your account, perform identity verification (KYC), and communicate with you about your account activity.

1.2 Identity Verification Documents

As part of our Know Your Customer (KYC) process, heynaji may request copies of government-issued identity documents such as your Bangladesh National Identity Card (NID), passport, or birth certificate. We may also request proof of address in the form of a utility bill or bank statement. These documents are used solely for age and identity verification purposes.

1.3 Financial Data

When you make a deposit or withdrawal, heynaji collects transaction-related information including the payment method used (e.g., bKash, Nagad, Rocket, Upay, or bank transfer), the transaction amount in BDT (৳), the date and time of the transaction, and the transaction reference number. heynaji does not store full bKash or Nagad PINs. Payment processing is handled by the respective payment providers under their own privacy and security frameworks.

1.4 Gaming Activity Data

heynaji maintains records of your gaming activity on the platform, including game titles played, bet amounts, session durations, win and loss history, and interaction with bonus and promotional offers. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement.

1.5 Device and Technical Data

When you access heynaji, our systems automatically collect certain technical data including your IP address, device type, operating system, browser type and version, time zone, and the pages you navigate within the platform. This data is used for security monitoring, fraud detection, and platform performance analytics.

1.6 Communications Data

If you contact heynaji support via email, WhatsApp, or live chat, we retain a record of those communications. This allows us to track the resolution of your queries, maintain a support history for your account, and improve the quality of our customer service.

2 How We Use Your Data

heynaji uses the personal data we collect for the following specific, legitimate purposes. We do not use your data in any way that is incompatible with the purposes for which it was originally collected.

heynaji will never use your personal data to make automated decisions that produce significant legal effects without giving you the opportunity to request human review of any such decision. Where automated fraud detection flags an account, a human member of the heynaji compliance team reviews the case before any account restriction is applied.

3 Legal Basis for Processing

heynaji processes personal data on one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual Necessity: Processing is required to fulfil the agreement between you and heynaji — specifically, to create and operate your account, process your transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including age verification obligations, anti-money laundering (AML) requirements, and responsible gaming obligations. heynaji cannot waive these requirements regardless of player preference.
• Legitimate Interests: Processing is carried out on the basis of heynaji's legitimate business interests, where those interests are not overridden by your rights and freedoms. Examples include fraud detection, platform security monitoring, and anonymised analytics for platform improvement.
• Consent: For certain processing activities — specifically, sending you promotional communications about heynaji offers, bonuses, and new games — heynaji relies on your explicit consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

4 Cookies & Tracking Technologies

heynaji uses cookies and similar browser-based tracking technologies to make the platform function correctly, maintain your session across page visits, and gather anonymised analytics that help us improve platform performance and user experience.

4.1 What Are Cookies?

Cookies are small text files placed on your device by your web browser when you visit a website. They allow the website to recognise your device on subsequent visits and recall certain information about your preferences and session state. heynaji uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

4.2 Types of Cookies Used by heynaji

• Essential / Strictly Necessary Cookies: These cookies are required for the heynaji platform to function. They maintain your login session, preserve your betting slip contents, and handle security token validation. Without these cookies, the platform cannot operate correctly. These cookies cannot be disabled.
• Analytics Cookies: heynaji uses anonymised first-party analytics to understand how players navigate the platform — which games are most visited, where users spend the most time, and which pages have high exit rates. This data helps us improve the platform experience. No personally identifiable information is included in analytics data.
• Security Cookies: These cookies are used to detect and prevent fraudulent activity, bot access, and unauthorised account access. They record signals such as login attempt frequency and device fingerprint consistency.
• Preference Cookies: These cookies remember your platform preferences, such as your most recently used payment method or preferred game category, to make your return visits faster and more convenient.

4.3 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Note that disabling essential cookies will prevent the heynaji platform from functioning correctly. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

5 Data Sharing & Third Parties

heynaji does not sell your personal data to any third party under any circumstances. We may share specific categories of your data with the following categories of trusted third parties, strictly for the purposes described, and only to the extent necessary to fulfil those purposes:

• Payment Processing Partners: When you make a deposit or withdrawal, your transaction details are shared with the relevant payment service provider (bKash, Nagad, Rocket, Upay, or your selected bank) to facilitate the transaction. These providers process your payment data under their own privacy policies and security standards.
• Game Technology Providers: To deliver the games available on heynaji, we work with third-party game studios and platform providers including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, Spribe, JILI, CQ9, and Habanero. These providers may receive anonymised session and game-play data for the purpose of game delivery and RTP certification. They do not receive your full personal profile.
• Identity Verification Services: To fulfil our KYC obligations, heynaji works with third-party identity verification technology providers. These providers process identity document images and biometric data strictly for the purpose of verifying that you are who you say you are and that you meet the 18+ age requirement.
• Customer Support Platform Providers: Our customer support infrastructure may be hosted by a third-party service provider. Support communications are stored on that provider's platform subject to a data processing agreement that requires them to handle your data in accordance with applicable privacy law.
• Legal and Regulatory Authorities: In certain circumstances, heynaji may be required by law to disclose personal data to law enforcement agencies, regulatory bodies, or court orders. heynaji will comply with all lawful data disclosure requests and will notify you to the extent permitted by law when such a disclosure is made.

All third parties with whom heynaji shares personal data are contractually required to handle that data securely, use it only for the specific purpose for which it was shared, and not disclose it to further parties without heynaji's prior written consent.

6 Data Retention

heynaji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

When the applicable retention period expires, heynaji will securely delete or anonymise the relevant personal data so that it can no longer be linked to you as an individual. Where anonymisation is used in place of deletion, the anonymised data may be retained indefinitely for aggregate statistical purposes.

7 Data Security

heynaji takes the security of your personal data seriously and implements a multi-layered set of technical and organisational security measures to protect it against unauthorised access, accidental loss, alteration, or destruction.

Technical Safeguards

• 256-bit TLS/SSL Encryption: All data in transit between your browser or mobile device and heynaji's servers is encrypted using industry-standard TLS/SSL protocols.
• Encryption at Rest: Sensitive personal data — including identity documents and financial records — is encrypted at rest in heynaji's database infrastructure.
• Access Controls: Access to production databases containing personal data is restricted to a defined set of authorised heynaji personnel using role-based access controls and multi-factor authentication.
• Intrusion Detection: heynaji's infrastructure is monitored 24/7 by automated intrusion detection systems that flag and escalate anomalous access patterns for human review.
• Penetration Testing: heynaji conducts periodic third-party security assessments and penetration tests to identify and remediate vulnerabilities in the platform's security posture.

Organisational Safeguards

• All heynaji staff members who handle personal data receive regular data privacy and security training.
• Data handling procedures are documented and reviewed on a periodic basis.
• heynaji operates a data breach response plan that specifies the steps to be taken to contain, assess, and notify in the event of a confirmed personal data breach.

While heynaji makes every reasonable effort to protect your data, no internet-based system is entirely immune from risk. You also have a role to play in keeping your account secure — please refer to the account security guidelines in our Terms & Conditions.

8 Your Privacy Rights

As a heynaji player, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected]. heynaji will respond to all valid data rights requests within 30 calendar days of receipt.

• Right of Access: You may request a copy of the personal data heynaji holds about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data heynaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly via your account settings page.
• Right to Erasure ("Right to Be Forgotten"): You may request that heynaji delete your personal data. This right is not absolute — where heynaji is required by law to retain certain data (e.g., AML transaction records), we are unable to delete that data ahead of the legally mandated retention period. Where deletion is possible, we will confirm its completion.
• Right to Restriction of Processing: You may request that heynaji restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request that heynaji provide your personal data in a portable format so that you can transfer it to another service provider where technically feasible.
• Right to Object: You may object to heynaji processing your data on the basis of legitimate interests, including for direct marketing purposes. Upon receiving a valid objection, heynaji will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where heynaji is processing your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9 Children's Privacy

During the account registration process, all applicants are required to confirm that they are aged 18 or above, and heynaji conducts identity verification checks to validate this confirmation. Any account found to belong to a person under the age of 18 will be immediately suspended, all balances frozen pending investigation, and the personal data of the underage individual deleted in accordance with applicable law — except where retention is required to record the breach for compliance purposes.

If you are a parent or guardian and have reason to believe that a person under your care has created a heynaji account or submitted personal data to heynaji, please contact us immediately at [email protected]. We take all such reports seriously and will act promptly to investigate and remediate.

heynaji also encourages parents and guardians to make use of parental control software and browser-level filtering tools to prevent minors from accessing online gambling platforms. For guidance on responsible gaming tools including self-exclusion, please visit heynaji's Responsible Gaming page.

10 Policy Updates

heynaji reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. When material changes are made to this Policy, heynaji will notify registered players by email to their registered address and/or via a prominent notice displayed upon login to the heynaji platform.

The effective date and last updated date at the top of this page will always reflect when the current version of this Policy came into force. heynaji recommends that you review this Privacy Policy periodically to remain informed about how your data is being handled.

Your continued use of the heynaji platform after the effective date of any revision to this Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the revised Policy, you should cease using the platform and may request account closure in accordance with the account closure procedures described in our Terms & Conditions.