Who We Are
This Privacy Policy applies to hy baji, the online gaming platform operating at hybaji.click ("hy baji", "we", "us", "our"). hy baji is responsible for the collection and use of personal data that you provide when you register, deposit, play or otherwise interact with the platform.
We understand that sharing your personal information with any online platform requires trust. Our goal with this Privacy Policy is to be completely open about what data we collect, why we collect it and what we do — and do not do — with it. If you have a question that this document does not answer, please contact our support team at any time.
By registering on hy baji and by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please stop using the platform and close your account.
Data We Collect
hy baji collects personal data through several touchpoints across the platform. We are deliberate about only collecting information that is genuinely necessary for the safe and compliant operation of your account. Below is a breakdown of the categories of data we may hold:
| Category | Examples | Why Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / passport number, photograph | Age verification, KYC compliance, account security |
| Contact Data | Email address, mobile number, mailing address | Account communication, transaction notifications, support |
| Financial Data | Payment method identifiers, transaction history, wallet balance | Processing deposits and withdrawals, AML compliance |
| Account Data | Username, password hash, login timestamps, session logs | Account access, fraud detection, security monitoring |
| Gaming Data | Bet history, game preferences, bonus usage, win/loss records | Game delivery, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser, operating system, location data | Platform optimisation, fraud prevention, eligibility checks |
| Communications Data | Support chat logs, emails sent to and from support, feedback forms | Customer service quality, dispute evidence, training |
We do not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs or biometric data unless specifically required for identity verification purposes and with your knowledge.
How We Use Your Data
The personal data hy baji collects is used for clearly defined purposes. We do not use your data in ways that would surprise or concern a reasonable person. The main purposes are:
- Account management: Creating, verifying and maintaining your hy baji account, processing your registrations and keeping your account secure.
- Transaction processing: Handling deposits, withdrawals and bonus credits to and from your PKR wallet using your chosen payment method (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card).
- Identity verification (KYC): Confirming your age, identity and payment method ownership in line with our Know Your Customer obligations. This is required before we release large withdrawals or when there is any concern about account integrity.
- Legal and regulatory compliance: Meeting our Anti-Money Laundering (AML) obligations, reporting requirements and responding to lawful requests from competent authorities.
- Game delivery and personalisation: Presenting the right game content, table limits and promotions based on your activity and preferences on the hy baji platform.
- Responsible gaming monitoring: Tracking play patterns to identify potential indicators of problem gambling and, where necessary, taking proactive steps to protect player welfare.
- Fraud and security monitoring: Detecting unusual account activity, multi-account behaviour, collusion, bonus abuse and other prohibited conduct.
- Customer support: Providing assistance with account queries, disputed transactions, technical problems and general questions.
- Platform improvement: Analysing aggregated and anonymised usage data to make hy baji a better, faster and more reliable platform for all Pakistani players.
- Marketing communications: Sending you information about promotions, new games and events — but only where you have opted in to receive such communications and in line with the preferences you set.
Legal Basis for Processing
Every time hy baji processes your personal data, there is a legitimate legal basis for doing so. The relevant bases we rely on are:
- Contractual necessity: Processing required to fulfil our obligations under the account agreement you entered into when registering — including running your account, processing bets and paying out winnings.
- Legal obligation: Processing necessary to comply with applicable laws and regulations, including AML legislation, age verification requirements and responses to lawful regulatory or law enforcement requests.
- Legitimate interests: Processing carried out for our legitimate business interests — such as fraud prevention, platform security and improving the hy baji experience — where those interests are not overridden by your rights.
- Consent: Where consent is the basis (primarily for optional marketing communications), you are free to withdraw it at any time without affecting any other processing we carry out under a different legal basis.
Sharing Your Data
hy baji does not sell your personal data to any third party. We share data only with carefully selected partners and only to the extent required for the purpose described. The categories of third parties we may share data with are:
- Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners — to process deposits and withdrawals.
- Identity verification providers: Specialist KYC/AML service providers who help us verify age, identity and payment ownership. These providers are bound by strict data processing agreements.
- Game content providers: Licensed game studios and live casino providers who supply game software and streaming infrastructure to the hy baji platform. They receive the minimum data necessary to deliver the game experience.
- Fraud prevention and security providers: Technical partners who help hy baji detect bot activity, multi-accounting and other fraudulent behaviour through automated monitoring tools.
- Legal and regulatory authorities: Where required by law, we will share data with competent authorities, courts or regulatory bodies — for example, in response to an AML investigation or a court order. We will notify you of any such disclosure where legally permitted to do so.
- IT and cloud infrastructure providers: Secure hosting and technology partners who process data on our behalf under contractual data protection obligations.
Data Retention
hy baji retains your personal data only for as long as necessary for the purposes described in this policy, or as required by law. The key retention periods that apply to your data are:
- Account data and transaction records: Retained for a minimum of five years from account closure. This period is driven by AML regulatory requirements that mandate records be available for inspection.
- KYC / identity documents: Retained for the duration of your account and for five years after account closure, as required by due diligence obligations.
- Support communications: Retained for three years from the date of the interaction, or longer if they are relevant to an unresolved dispute.
- Technical and device logs: Typically retained for 12 months for fraud detection and security purposes, after which they are deleted or anonymised.
- Marketing consent records: Retained until you withdraw consent plus one year for record-keeping purposes.
When retention periods expire, data is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement.
Cookies & Tracking Technologies
hy baji uses cookies and similar tracking technologies to make the platform work properly, to remember your preferences and to understand how players use the site so we can keep improving it. Here is what the different types of cookies on hy baji do:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Keep you logged in, maintain session state, enable core platform functions. The site cannot work properly without these. | No — required for core functionality |
| Functional | Remember your language, table settings, game preferences and other personalisation choices across sessions. | Yes — disabling affects convenience |
| Analytics | Aggregate, anonymised data on how players navigate hy baji — used purely to improve the platform, not to identify individual users. | Yes — via cookie preferences |
| Security | Help detect fraud, bot traffic and suspicious login patterns to protect your account. | No — required for account security |
You can manage non-essential cookie preferences through your browser settings. Note that disabling functional or analytics cookies will not affect your ability to play games or process transactions on hy baji.
Your Data Rights
As a hy baji player, you have a set of rights over your personal data. These rights are not difficult to exercise — you can initiate any of the following by contacting our support team:
To exercise any of these rights, email us at support@hybaji.click with "Data Rights Request" in the subject line and a clear description of your request. We will acknowledge your request within 5 business days and aim to resolve it within 30 days.
Security Measures
Protecting the data that Pakistani players entrust to hy baji is something we invest in continuously. The security measures we have in place include:
- SSL/TLS encryption on all data in transit between your browser or app and hy baji's servers — the same standard used by banks.
- Encrypted storage for sensitive data fields including passwords (which are stored as salted hashes, never in plaintext) and identity document references.
- Access controls ensuring that only authorised hy baji personnel with a genuine business need can access personal data, with all access logged and monitored.
- Two-factor authentication available for your hy baji account login, which we strongly recommend enabling.
- Automated fraud and intrusion detection monitoring account activity in real time to spot and respond to unusual patterns quickly.
- Regular security reviews and vulnerability assessments of the platform infrastructure.
No digital system is entirely impenetrable, but hy baji implements measures proportionate to the risk and consistent with industry standards. In the unlikely event of a data breach that poses a significant risk to your rights, we will notify affected players as quickly as practicable.
Children's Privacy
hy baji is strictly an 18+ platform. We do not knowingly collect or process personal data from anyone under the age of 18. Age verification is a mandatory part of the registration and withdrawal process, and we take our obligations in this area very seriously.
If a parent or guardian becomes aware that a minor has registered on hy baji, they should contact our support team immediately. Any account identified as belonging to a minor will be closed without delay, all balances will be voided and any personal data associated with that account will be deleted in accordance with our legal obligations.
Policy Updates
hy baji reviews this Privacy Policy periodically and will update it when our practices change, when new features are introduced to the platform or when legal requirements evolve. The date at the top of the page always reflects when the policy was last changed.
When we make material changes to this policy, we will notify registered players via email and/or a prominent notice on the platform at least 7 days before the changes come into effect — except where immediate changes are required for security, legal or regulatory reasons.
Continuing to use hy baji after a revised Privacy Policy comes into effect constitutes your acceptance of the updated terms. If you do not agree with the changes, please stop using the platform and close your account before the effective date of the revision.
We recommend bookmarking this page and reviewing it periodically, especially when you receive a notification of changes.
Contact & Complaints
If you have any questions about this Privacy Policy, about how hy baji handles your personal data, or if you wish to exercise any of your data rights, please get in touch with us. Our support team is available 24 hours a day, seven days a week.
Email us at support@hybaji.click — please include "Privacy Query" or "Data Rights Request" in the subject line so we can route your message to the right team quickly.
If you have a complaint about how hy baji has handled your data and our support team has not resolved it to your satisfaction, you have the right to escalate the matter. We are committed to investigating all privacy complaints thoroughly and responding within 30 days with either a resolution or a clear explanation of the next steps.
We take every privacy concern seriously and treat all complaints as an opportunity to improve our practices for the benefit of all players on the hy baji platform.