Heibij's Privacy Policy — How your information is kept secure

Certain information is collected when you register and use heibij. Each piece of data collected has a specific purpose — only what is necessary to deliver the service is gathered.

Heibij collects information through three primary methods. You should have a clear understanding of each.

1. Provided by you: You provide information directly when completing the registration form, uploading documents for KYC verification, or contacting support.
2. Automatically: While using heibij, certain technical data — such as your IP address, time spent on each page, and the device you're using — is collected automatically.
3. During Payment Processing: For transactions made via bKash or Nagad, only the transaction reference and amount are kept in heibij's records.

Heibij uses your data only for specific, defined purposes. Those purposes are clearly outlined below.

• Account Management: For login, security verification, and identity confirmation.
• Financial Transactions: To correctly process deposits and withdrawals.
• Service Improvement: To analyze feature usage and improve the platform.
• Customer support: To verify the information needed for troubleshooting and support.
• Responsible Gaming: To detect suspicious or unusual gaming patterns and protect members.
• Legal Obligation: To comply with applicable laws and KYC/AML regulations.

Heibij may share information with third parties in limited circumstances, but such sharing is always controlled and purpose-driven.

• Payment processors: Necessary data is shared with payment gateways such as bKash and Nagad to process transactions.
• Game Providers: Only minimal session-related data is shared with providers like Evolution and Pragmatic to facilitate gameplay.
• Technology Partners: Server and security service providers, bound by strict confidentiality agreements.
• Legal authorities: When required by a valid court order or directive from a regulatory authority.

Except in the cases outlined above heibij never shares, sells, or rents your personal data to third parties.

Heibij uses multiple layers of security to protect your data — not just as a written commitment, but enforced through technology as well.

• TLS 1.3 Protocol: All data transmissions are encrypted using the latest TLS protocol.
• 256-bit AES encryption: All stored sensitive data is protected with high-grade encryption.
• Two-Factor Authentication (2FA): OTP verification for an extra layer of security at login.
• Server monitoring: Regular third-party security audits are conducted.
• Access Control: heibij staff can only access the information necessary to perform their specific job duties.
• Data Backup: Regular backups are maintained in a secure location to prevent data loss in the event of a technical failure.

Heibij uses cookies on its website and app. Cookies are small files stored in your browser that help improve the service.

You can disable optional cookies from your browser settings. However, turning off essential cookies may affect how the platform functions.

Heibij does not retain your data indefinitely. Once the specified retention period expires or the purpose is fulfilled, your information is securely deleted.

• Active account data: For as long as your account remains active.
• Transaction Records: Up to 5 years as required by law.
• KYC documents: 3 years from the date of the last transaction.
• Gaming history: Up to 3 years (for dispute resolution purposes).
• After account closure: Personal data is deleted within 30 days, except where retention is required by legal obligation.

At heibij, you have several rights over your own data. Knowing these rights puts you in greater control.

To exercise any of your rights support@heibij.net. We will respond within 30 days.

Heibij may update this Privacy Policy when necessary. If changes are made, you will be notified in advance at your registered email address. The date of the latest update is always shown at the top of this page.

For major changes, at least 30 days' notice will be given in advance. Minor updates — such as spelling corrections or clarifications — may not be separately communicated.