hi bajji Privacy Policy —
How We Protect Your Personal Data

hi bajji collects personal data from you in several ways: directly through the information you provide during registration and use of the platform; automatically through your interaction with the website and its features; and, where necessary, through trusted third-party verification partners. The categories of personal data we collect are described below.

Registration & Identity Data

When you create a hi bajji account, we collect your full legal name, date of birth, email address, and mobile phone number. During the Know Your Customer (KYC) identity verification process, we may also collect copies of government-issued identification documents such as your Bangladesh National ID Card (NID), passport, or driving licence. We may additionally collect proof of address documents such as a recent utility bill or bank statement.

Account & Transaction Data

We collect information about your account activity, including your login history, deposit and withdrawal transactions, betting history, game session data, and bonus usage records. This data is necessary to operate your account, calculate your balance accurately, and detect and prevent fraud or prohibited activity.

Payment Data

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, we collect the mobile wallet number associated with the transaction and the transaction reference provided by the mobile financial service (MFS) provider. hi bajji does not store full payment credentials — the actual processing of mobile payments is handled by the respective MFS providers.

Technical & Device Data

We automatically collect certain technical data when you access hi bajji, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data helps us maintain platform security, optimise performance, and detect suspicious access patterns.

Communications Data

If you contact our customer support team via email or live chat, we retain records of that correspondence, including the content of messages, timestamps, and any attachments you provide. This data is used to manage your support request and to improve our service quality.

Data We Do Not Collect

hi bajji does not knowingly collect data from persons under the age of 18. If we discover that we have inadvertently collected data from a minor, that data will be deleted immediately and the associated account closed. hi bajji also does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information.

hi bajji does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, in the course of operating the platform, we work with a number of trusted third-party partners and service providers who may process your data on our behalf or alongside us. All such partners are required to handle your data in a manner consistent with this Privacy Policy and applicable data protection standards.

Game Technology Providers

Casino games, live dealer products, and crash games on hi bajji are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. When you play a game developed by these studios, limited session data — such as game round identifiers and bet amounts — is processed by the relevant provider's servers in order to deliver the game outcome. These providers are globally audited and operate under strict data security standards. They do not receive your full personal profile; only the data necessary to run the game session.

Payment Service Providers

Deposit and withdrawal transactions are processed through Bangladesh's leading mobile financial service providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay (United Commercial Bank). When you initiate a transaction, the relevant MFS provider receives the transaction value and your registered mobile wallet number. hi bajji does not have access to your full MFS account credentials or PIN. Each MFS provider has its own privacy policy governing how it handles your data.

Identity Verification Partners

hi bajji may engage specialist KYC and identity verification technology partners to assist with document verification and age confirmation. These partners process the identity documents you submit under strict confidentiality obligations and are not permitted to use your data for any purpose other than verification on hi bajji's behalf.

Analytics & Security Services

hi bajji uses server-side analytics tools and security monitoring services to detect unusual traffic patterns, protect against DDoS attacks, and understand how players use the platform. These tools may process IP addresses and session data. Where possible, hi bajji configures analytics tools to anonymise data before it is processed.

Regulatory & Law Enforcement Disclosure

hi bajji may be required by law to disclose personal data to regulatory authorities, law enforcement agencies, or courts in response to a lawful request, court order, or where we reasonably believe disclosure is necessary to prevent fraud, protect national security, or investigate a serious breach of these Terms & Conditions. hi bajji will, where legally permissible, notify you of such a disclosure.

Business Transfers

In the event that hi bajji undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any changes to the applicable privacy policy within a reasonable timeframe.

hi bajji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. We do not retain personal data indefinitely. The following retention periods apply.

Active Account Data

While your account is active, hi bajji retains all account data, transaction records, and betting history necessary to operate your account and respond to any disputes or regulatory enquiries. Active account data is reviewed periodically and data no longer required for operational purposes is deleted or anonymised.

Post-Closure Retention

After an account is closed — whether by you voluntarily or by hi bajji — we retain core account and transaction data for a minimum period of five years. This retention period reflects our obligations to maintain records for anti-money laundering compliance, dispute resolution, and regulatory audit purposes. After this period, your personal data will be securely deleted or anonymised in such a way that you can no longer be identified from it.

KYC Document Retention

Identity verification documents (such as NID copies, passport scans, and proof of address documents) submitted as part of the KYC process are retained for a minimum of five years following account closure. This is consistent with standard compliance obligations in the online gaming industry. KYC documents are stored on encrypted, access-controlled servers.

Support Correspondence

Records of customer support interactions are retained for a period of three years from the date of the most recent correspondence. This allows hi bajji to reference prior support history when handling related queries or escalations.

Data Storage Location

hi bajji stores personal data on secure servers. All stored data is encrypted at rest using industry-standard encryption. Access to personal data stored on hi bajji systems is restricted to authorised personnel on a strict need-to-know basis, and all access is logged and audited.