This Privacy Policy describes how heybaji collects, uses, stores, shares, and protects the personal data of every player who registers or interacts with heybaji.vin. We are committed to handling your information with transparency, security, and respect — whether you are logging in from Karachi, Lahore, Islamabad, or anywhere else in Pakistan.
These six principles summarise how heybaji treats your personal data. The complete legal text is set out in the sections below.
heybaji does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes — ever. Your information is used solely to operate and improve your heybaji experience.
All data transmitted between your device and heybaji.vin is protected by industry-standard 256-bit SSL encryption. Your CNIC details, payment information, and login credentials are never exposed in transit.
heybaji gives you clear rights over your personal data — including the right to access, correct, restrict, and in certain circumstances request deletion of the information we hold about you.
heybaji only shares personal data with trusted, vetted third parties — such as KYC verification providers, payment processors (JazzCash, EasyPaisa, HBL), and our licensing regulator — where strictly necessary.
heybaji does not hold your personal data indefinitely. Retention periods are defined by regulatory requirements under our international gaming license and are explained clearly in this Privacy Policy.
In the unlikely event of a data breach that poses a risk to your rights, heybaji will notify affected players promptly and take immediate steps to contain, investigate, and remediate the incident.
heybaji ("heybaji", "we", "us", "our") operates the online casino and sports betting platform accessible at heybaji.vin. heybaji operates under an international gaming license and provides its services to eligible players, including English-speaking Pakistani users who meet the minimum age requirement of 21 years.
For the purposes of this Privacy Policy, heybaji is the data controller responsible for the personal information you provide when registering, depositing, playing, or otherwise interacting with heybaji.vin. This Privacy Policy applies to all heybaji services including slot games, live dealer casino, cricket betting, instant games, and all associated payment and account management services.
This Privacy Policy should be read alongside heybaji's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
heybaji collects personal data that is necessary to provide you with a safe, compliant, and personalised gaming experience. The categories of personal data we collect are set out in the table below.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, selfie/photograph | KYC verification, age confirmation, regulatory compliance |
| Contact Data | Pakistani mobile number, email address | Account management, OTP authentication, support communications |
| Financial Data | JazzCash/EasyPaisa account number, HBL/UBL bank account details, USDT wallet address, transaction history | Deposit and withdrawal processing, fraud prevention, AML compliance |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Security monitoring, fraud detection, platform optimisation |
| Usage Data | Games played, bets placed, session duration, bonus claims, deposit/withdrawal amounts | Responsible gaming monitoring, personalisation, bonus eligibility |
| Communications Data | Live chat transcripts, support emails, complaint records | Dispute resolution, service quality, regulatory record-keeping |
| Marketing Preferences | Opt-in/opt-out choices for SMS, email, and push notifications | Delivering relevant promotions only to players who have consented |
heybaji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion or problem gambling support request, in which case it is handled with the highest level of confidentiality.
The majority of the personal data heybaji holds is provided directly by you at various stages of your interaction with the platform, including:
heybaji automatically collects certain technical and usage data when you access heybaji.vin or use our services. This includes your IP address, device identifiers, browser type, session start and end times, pages visited, and in-platform actions such as game launches and bet placements. This data is collected using cookies, server logs, and similar technologies as described in Section 7.
heybaji may receive personal data about you from trusted third-party sources, including identity verification partners for CNIC validation, payment processors for transaction confirmation, and fraud prevention services that help us detect suspicious activity on your account.
heybaji uses your personal data only for the purposes for which it was collected or for compatible purposes that you would reasonably expect. The primary purposes are:
heybaji processes your personal data on the following legal bases:
heybaji does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited and controlled circumstances:
heybaji works with carefully vetted third-party service providers who process data on our behalf under strict data processing agreements. These include KYC verification partners, payment processors (including JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT TRC20 infrastructure providers), fraud detection services, cloud hosting providers, and customer support platform operators. These parties may only process your data for the purposes specified by heybaji and in accordance with our instructions.
heybaji may be required to disclose player data to the regulatory authority under whose license it operates, in response to lawful audit requests, compliance reviews, or investigations. heybaji will comply with such requests to the extent required by applicable law.
heybaji will disclose personal data to law enforcement or other governmental authorities where required to do so by law, court order, or where heybaji has reasonable grounds to believe that disclosure is necessary to prevent or detect a serious crime, including money laundering or fraud.
In the event of a merger, acquisition, or sale of substantially all of heybaji's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address if such a transfer results in a material change to how your data is processed.
heybaji.vin uses cookies and similar tracking technologies to operate the platform, maintain your session, prevent fraud, and improve your experience. The categories of cookies used on heybaji.vin are as follows:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, login state, fraud prevention | Session / up to 24 hours |
| Functional | Language preferences, game settings, responsible gaming tool states | Up to 12 months |
| Analytics | Aggregated, anonymised platform usage to improve heybaji's services | Up to 12 months |
| Marketing | Tracking promotional campaign effectiveness for opted-in players | Up to 30 days |
Strictly necessary cookies cannot be disabled as they are essential to the operation of heybaji.vin. You may manage your preferences for non-essential cookies through your browser settings. Disabling functional or analytics cookies may affect your experience on the platform.
heybaji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes. The following retention periods apply:
Upon expiry of the applicable retention period, heybaji will securely delete or anonymise your personal data in a manner that prevents recovery or reconstruction.
heybaji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
While heybaji takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your heybaji account and to enable OTP authentication to maximise the security of your account.
heybaji respects your rights as a data subject. The following rights are available to all heybaji players in respect of the personal data we hold about you:
You may request a copy of the personal data heybaji holds about you at any time. heybaji will provide this within 30 days of a verified request.
If any personal data heybaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. Note that regulatory retention obligations may limit this right in some cases.
You may request that heybaji restrict processing of your personal data while a dispute about its accuracy or the lawfulness of processing is resolved.
Where processing is based on consent or contract, you may request that heybaji provide your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
To exercise any of these rights, please contact heybaji's support team at [email protected] with the subject line "Data Rights Request". heybaji will verify your identity before processing any data rights request and will respond within 30 calendar days.
heybaji's services are strictly intended for adults aged 21 years and above. heybaji does not knowingly collect personal data from individuals under the age of 21. Age is verified at the KYC stage via CNIC submission, which carries the player's date of birth.
If heybaji becomes aware that an account has been registered by a person under 21 years of age, the account will be immediately suspended, all balances will be forfeited, and any personal data associated with the account will be deleted in accordance with our legal obligations. The matter may be referred to relevant authorities where required.
If you believe that a minor may have registered a heybaji account, please contact us immediately at [email protected] so that we can investigate and act without delay.
heybaji will only send you promotional communications — including bonus offers, seasonal campaigns, PSL cricket betting promotions, and platform news — if you have explicitly opted in to receive such communications during registration or via your account settings.
You may withdraw your consent to marketing communications at any time by:
Opting out of marketing communications does not affect transactional communications, such as deposit confirmations, withdrawal notifications, KYC status updates, or important account security alerts. These are essential service communications and cannot be opted out of while your account remains active.
heybaji operates under an international gaming license and may use cloud infrastructure and service providers located outside Pakistan. As a result, your personal data may be transferred to and stored in countries other than Pakistan. Where such transfers occur, heybaji ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.
These safeguards include: contractual data processing agreements with all third-party service providers, adherence to the data protection requirements of heybaji's licensing jurisdiction, and the implementation of technical security controls (including encryption) on all data stored or processed outside Pakistan.
heybaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, heybaji will notify registered players via their registered email address and will update the "Last Updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically. Your continued use of heybaji.vin following the publication of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should cease using the platform and may request account closure in accordance with heybaji's Terms & Conditions.
If you have any questions, concerns, or complaints about this Privacy Policy or heybaji's handling of your personal data, please contact us through the following channels:
heybaji takes all privacy complaints seriously. If you submit a complaint, we will acknowledge it within 48 hours and provide a substantive response within 14 business days. If you are not satisfied with heybaji's response, you may escalate the matter to the relevant supervisory authority under whose jurisdiction heybaji's gaming license operates.
Now that you know exactly how heybaji protects your personal data, you can play with complete confidence. Join thousands of Pakistani players enjoying cricket betting, live casino, and instant games — all in PKR. 21+ only.