Reference

How Heya Baji Handles Your Personal Information

Your privacy is part of how we operate — not an afterthought. This policy tells you exactly what we collect when you open an account, make a deposit via bKash, Nagad, or Rocket, and use our platform.

Account Data ProtectedPayment Info Handled SecurelyYour Rights, Clearly StatedBangladesh-Focused Policy
Heya Baji How Heya Baji Handles Your Personal Information
HOW WE PROTECT YOU

Data Handling, Cookies, and Account Security

We use HTTPS encryption across every page and during every transaction, including when your bKash or Nagad payment request is being processed. Cookies on our site serve session management and basic analytics — you can adjust non-essential cookie preferences through the cookie notice that appears on your first visit. Account passwords are stored as hashed values; plain-text passwords are never retained. We keep your account data for as long as your account remains active and for a defined period afterwards, as required by applicable regulations.

SSL Encryption Every page and payment step runs over HTTPS. Your data in transit — including wallet transaction details — is encrypted end to end at all times.
Cookie Controls We use session cookies for login and optional analytics cookies to understand how you navigate the site. You can decline non-essential cookies without affecting your account access.
Data Retention Your personal data is held for the duration of your account and the legally required period after closure. We do not keep data longer than necessary for compliance or dispute resolution.
Account Deletion Requests To request data deletion, contact our support team in writing. We will confirm the scope of what can be removed and the expected completion timeframe.
REACH OUR TEAM

Contact Us About Your Privacy

If you have a question about this policy, want to access your data, or need to report a concern, our support team handles privacy requests directly. We aim to respond to data-related queries within a reasonable timeframe. Availability is subject to local law and the eligible regions where we operate.

Live Chat Start a chat from any page on Heya Baji. Our support team can log a formal privacy request and confirm receipt on the same session.
Email Support Send your privacy request to our support address listed on the Contact page. Include your registered mobile number so we can locate your account quickly.
Account Settings Some data corrections — like updating your registered phone number — can be started directly from your account settings page before contacting support.

Common Questions About Your Privacy at Heya Baji

These are the questions we hear most often about how we handle your data. If something is not covered here, contact our support team directly through live chat or email.

We collect your name, registered mobile number, and account credentials at sign-up. Device and session data is also collected to secure your account against unauthorised access.

No. We never store your mobile wallet PIN or banking password. Only the transaction reference and amount are logged to confirm your deposit or withdrawal on your account.

Your data is accessible to our internal operations team for account management and support. It is shared with payment processors only to complete your bKash, Nagad, or Rocket transactions. We do not sell your data.

Contact our support team via live chat on Heya Baji or by email. Include your registered mobile number. We will locate your account and respond with your data summary.

Yes. Submit a written deletion request through our support channel. We will confirm what can be removed and the timeframe, which may be subject to legal retention requirements in applicable regions.

Access and eligibility depend on your local law and the eligible regions where we operate. If you are in a supported region, this policy covers all data we collect through your account and transactions.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.