high baji Privacy Policy
Your Data, Protected
At high baji, your privacy is a core commitment — not an afterthought. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and what rights you hold as a player based in Bangladesh or any other permitted territory.
Information We Collect
high baji collects personal data from players through several channels: directly from you when you register an account or contact support, automatically when you interact with the platform, and from trusted third-party partners where this is permitted under applicable data protection frameworks. The categories of personal data we collect are set out below.
Registration and identity data: When you create a high baji account, we collect your full legal name, date of birth, residential address in Bangladesh, email address, mobile phone number (including country code), and a username of your choosing. This data is collected to establish your identity, verify your age (18+ requirement), and create your account record.
Financial and payment data: To process deposits and withdrawals, high baji collects your payment method details. For mobile money services such as bKash, Nagad, Rocket, and Upay, this includes your registered mobile wallet number. For Bangladeshi bank transfers (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), this includes your account number and bank name. For card payments (Visa, Mastercard), we collect card details only to the extent necessary to process the transaction — full card numbers are not stored on high baji's servers and are handled by our PCI-DSS-compliant payment processing partners.
Identity verification (KYC) data: As part of our Know Your Customer process, we may request a copy of your Bangladesh National Identity Card (NID) or passport. These documents are stored securely and used exclusively for the purposes of age and identity verification.
Technical and device data: When you access high baji, our servers automatically collect technical data including your IP address, device type, browser type and version, operating system, screen resolution, and time zone setting. This data is used for security monitoring, fraud detection, and platform optimisation.
Behavioural and usage data: We collect data about how you use the platform, including pages visited, games played, bet amounts, session durations, and navigation patterns. This data helps high baji personalise your experience, improve the platform, and identify responsible gaming concerns.
Data Categories at a Glance
- Identity data — name, DOB, address, NID
- Contact data — email, mobile number
- Financial data — payment method details
- KYC documents — NID or passport copies
- Technical data — IP address, device info
- Behavioural data — game history, session logs
- Communications — support chat and email records
How We Use Your Data
high baji uses the personal data we collect for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes described below, and we do not sell your personal data to third parties for marketing purposes under any circumstances.
Account Management
We use your registration and identity data to create and manage your high baji account, verify your identity, enforce the 18+ age requirement, process logins, and communicate account-related notifications such as security alerts, verification requests, and account status updates.
Payment Processing
Your financial and payment data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Bangladeshi bank transfers, and card payments. We also use transaction data to detect and prevent payment fraud, comply with anti-money laundering (AML) obligations, and generate the financial records required for regulatory compliance.
Security & Fraud Prevention
Technical and behavioural data — including IP addresses, device fingerprints, and betting patterns — are used to detect suspicious activity, prevent account takeovers, identify bonus abuse and multi-accounting, and ensure the integrity of the platform and fairness to all players.
Platform Improvement
Aggregated and anonymised usage data is analysed to understand how players interact with high baji, identify popular games and features, detect friction points in the user experience, and prioritise platform development. This analysis does not involve individual-level profiling for marketing purposes.
Responsible Gaming
Behavioural data — including session frequency, bet sizes, deposit patterns, and time-on-platform metrics — is monitored by our responsible gaming systems to identify players who may be showing signs of problem gambling. Where such signs are detected, high baji may proactively reach out with responsible gaming resources. See the Responsible Gaming page.
Promotions & Communications
Where you have opted in to marketing communications, we use your contact data and game preferences to send you personalised promotional offers, bonus notifications, and seasonal promotions relevant to the Bangladeshi calendar. You may opt out of marketing communications at any time via your account settings or by contacting support.
Legal Basis for Processing
high baji processes personal data on the basis of one or more of the following lawful grounds, in accordance with internationally recognised data protection principles including those set out in the General Data Protection Regulation (GDPR) framework, which inform our privacy practices even where they do not directly apply by statute.
| Processing Purpose | Legal Basis | Details |
|---|---|---|
| Account registration & management | Contractual necessity | Processing is required to perform the contract between you and high baji (the Terms & Conditions you accepted on registration). |
| Payment processing | Contractual necessity | Deposit and withdrawal processing is a core element of the service high baji provides under its contractual obligations to players. |
| Identity verification (KYC) | Legal obligation | high baji is required to verify player identities and ages under applicable anti-money laundering and responsible gaming obligations. |
| Fraud & security monitoring | Legitimate interests | high baji has a legitimate interest in protecting the platform and its players from fraud, cheating, and abuse, provided this does not override player rights. |
| Responsible gaming monitoring | Legal obligation / Legitimate interests | Monitoring player behaviour for responsible gaming indicators is both a legal obligation and a legitimate operational interest of high baji. |
| Marketing communications | Consent | Promotional emails and personalised offers are only sent where you have given clear, freely given, and revocable consent. Withdrawal of consent does not affect processing based on other legal grounds. |
| Platform analytics | Legitimate interests | Aggregated, anonymised analysis of platform usage is conducted under high baji's legitimate interest in improving its services. |
Data Sharing & Disclosure
high baji does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the specific, limited circumstances described below, and only to the extent necessary for each purpose.
Payment processors and financial partners: To facilitate deposits and withdrawals, high baji shares necessary payment and identity data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and our card processing gateway. These partners are contractually bound to process your data only for the purpose of completing the transaction and to maintain appropriate security standards.
Game providers and software partners: The games available on high baji are provided by third-party game studios including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, Red Tiger, and Spribe. When you play a game provided by a third-party studio, certain technical data (including player session identifiers and bet records) is shared with that studio to enable game delivery, results generation, and technical support. Game providers are not permitted to use this data for their own marketing purposes.
Identity verification providers: high baji uses specialist third-party KYC providers to assist with document verification and age checks. These providers process identity document data solely for verification purposes and are bound by strict data processing agreements.
Legal and regulatory disclosure: high baji may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or in response to a lawful request. We will notify you of any such disclosure to the extent permitted by law.
Business transfers: In the event of a merger, acquisition, or sale of all or a material part of high baji's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any change in privacy practices via your registered email address.
Who We Share Data With
- Payment processors — bKash, Nagad, Rocket, Upay, card gateways
- Game studios — Pragmatic Play, Evolution, NetEnt, Microgaming
- KYC / identity verification providers
- Fraud prevention and AML screening services
- IT infrastructure and hosting providers
- Legal and regulatory authorities (when legally required)
Cookies & Tracking Technologies
high baji uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit high-baji.com. Cookies enable the platform to recognise your device, maintain your session, remember your preferences, and gather analytical data about platform usage. The categories of cookies used by high baji are described below.
5.1 Strictly Necessary Cookies
These cookies are essential for the platform to function and cannot be disabled. They include session authentication cookies (which keep you logged in during your visit), security cookies (which protect against cross-site request forgery), and load-balancing cookies (which ensure platform stability during high-traffic periods such as BPL and IPL matches). These cookies do not track personal behaviour and are active only for the duration of your session.
5.2 Functional Cookies
Functional cookies remember your account preferences, including your preferred language settings, display options, and any game-specific settings you have configured. These cookies improve your experience by ensuring that your preferences are retained between sessions. They are stored for up to 12 months and may be disabled via your browser settings, though doing so may affect platform functionality.
5.3 Analytics Cookies
high baji uses analytics cookies to collect aggregated, anonymised data about how players navigate the platform. This data helps us understand which features are most used, where players encounter difficulties, and how the platform can be improved. Analytics data is not linked to individual player identities. You may opt out of analytics cookies without affecting core platform functionality.
5.4 Security and Fraud Detection
high baji uses device fingerprinting and behavioural tracking technologies in addition to cookies for the purpose of fraud detection and responsible gaming monitoring. These technologies analyse device characteristics, IP addresses, and usage patterns to identify suspicious activity. This processing is conducted on the legal basis of legitimate interests in platform security, and the data is not used for advertising purposes.
Data Retention
high baji retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as is required to comply with our legal and regulatory obligations. The table below summarises our standard retention periods by data category. At the end of the applicable retention period, personal data is securely deleted or anonymised.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML compliance, dispute resolution, and regulatory record-keeping obligations. |
| KYC / identity documents | Duration of account + 5 years after closure | Required by anti-money laundering regulations and identity fraud prevention obligations. |
| Transaction records | 7 years from the date of the transaction | Financial record-keeping requirements under applicable accounting and AML frameworks. |
| Game and betting logs | 12 months from the date of each game round | Dispute resolution, responsible gaming monitoring, and platform integrity purposes. |
| Support communications | 3 years from the date of each communication | Dispute resolution, quality assurance, and platform improvement analysis. |
| Marketing preferences | Until consent is withdrawn, then deleted within 30 days | Consent-based processing — data is deleted promptly upon withdrawal of consent. |
| Technical / server logs | 90 days from collection | Security monitoring and technical diagnostics. Automatically purged on a rolling 90-day cycle. |
Your Rights as a Data Subject
high baji respects your rights over your personal data. The following rights are available to all players, including those accessing the platform from Bangladesh. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 48 hours and provide a full response within 30 days of receipt.
Right of Access
You have the right to request a copy of all personal data high baji holds about you. We will provide a structured, commonly used, machine-readable copy of your data within 30 days of a valid access request. The first copy is provided free of charge.
Right to Rectification
If personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. You may update many account details directly via your account settings. For identity and KYC data, please contact our support team.
Right to Erasure
You may request that high baji delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Note that erasure requests cannot override legal retention obligations described in Section 6.
Right to Restriction
You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing based on legitimate interests and a determination is pending.
Right to Portability
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a portable format and to request that it be transmitted directly to another data controller where technically feasible.
Right to Object
You have the right to object at any time to processing of your personal data based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease all such communications immediately. Objections to other legitimate-interest processing will be evaluated within 30 days.
Data Security
high baji implements a comprehensive, multi-layered security framework to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated regularly to address emerging threats and industry developments.
Encryption: All data transmitted between your device and high baji's servers is protected using 256-bit SSL/TLS encryption. Personal data held in our databases is encrypted at rest using AES-256 encryption. KYC documents and financial records are subject to additional access controls and encryption layers.
Access controls: Access to personal data within high baji's systems is strictly limited to staff members who require access to perform their job functions. All staff with access to personal data undergo security training and are bound by confidentiality obligations. System access is logged and monitored for anomalous activity.
Infrastructure security: high baji's platform infrastructure is hosted in secure, ISO 27001-aligned data centres with physical access controls, redundant power supplies, and network-level DDoS protection. Regular penetration testing and vulnerability assessments are conducted by independent security specialists.
Incident response: high baji maintains a formal data breach response procedure. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected players without undue delay and provide information on the nature of the breach, the data affected, and the steps being taken to address it.
Security Measures Summary
- 256-bit SSL/TLS encryption in transit
- AES-256 encryption at rest for sensitive data
- Role-based access controls with full audit logging
- Regular independent penetration testing
- ISO 27001-aligned data centre infrastructure
- Network-level DDoS protection
- Formal data breach response procedure
- Staff security training and confidentiality obligations
Third-Party Services
The high baji platform integrates with a number of third-party services to deliver its full range of features. Each third-party integration involves some sharing of data as described in Section 4. high baji carefully selects its third-party partners and requires all partners to maintain data protection standards consistent with this Privacy Policy. The primary third-party service categories and their data implications are described below.
9.1 Game Software Providers
Games on high baji are delivered by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Red Tiger, and Spribe. When you play a game, your player session ID, bet amounts, and game outcomes are shared with the relevant provider's systems to deliver the game and generate results. These providers operate their own privacy policies for data they collect via their own platforms, but are contractually restricted from using data shared via high baji for any purpose beyond game delivery and technical support.
9.2 Payment Service Providers
Payment processing for bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions is handled by or in coordination with the respective payment service providers. These providers are subject to their own regulatory frameworks, including PCI-DSS standards for card payments and Bangladesh Bank regulations for mobile financial services. high baji shares only the minimum data necessary to complete each transaction. Full card numbers are never stored on high baji servers.
9.3 Analytics and Performance Tools
high baji uses server-side analytics tools to measure platform performance and user engagement. Where third-party analytics services are used, they are configured to anonymise IP addresses and not to build individual user profiles for advertising purposes. Aggregated analytics data may be shared with game providers as audience insight summaries that do not contain personally identifiable information.
9.4 External Links Disclaimer
The high baji platform does not include links to third-party websites for commercial or advertising purposes. Any external reference made in informational content on the platform (for example, references to responsible gaming organisations in Bangladesh) does not constitute an endorsement of that organisation's privacy practices. high baji is not responsible for the privacy practices of any external website or service that you choose to access independently.
Policy Updates & Contact
high baji reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable data protection law, changes in platform functionality, new third-party integrations, or improvements to our privacy practices. All updates will be published on this page with a revised "Last Updated" date shown in the page header.
Where a proposed change to this Privacy Policy is material — meaning it significantly affects your rights or the way your data is used — high baji will provide at least 14 days' advance notice to all registered players via email to their registered address. Your continued use of the high baji platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.
If you do not agree with any update to this Privacy Policy, you should cease using the platform and may request account closure by contacting our support team. Closure requests submitted in response to a Privacy Policy update will be processed within 5 business days, and any eligible balance will be returned to your registered payment method.
For all privacy-related enquiries, data subject requests, or concerns about how high baji handles your personal data, please contact our dedicated privacy support channel. Our team is available every day of the year, and all privacy enquiries receive a dedicated response — not an automated reply. We are committed to addressing your privacy concerns transparently, promptly, and in plain English.
Privacy Contact Details
- Email: [email protected]
- Live chat available 24/7 on the platform
- Response within 48 hours (BST, UTC+6)
- Subject line: "Privacy Enquiry" or "Data Subject Request"
- Full resolution within 30 days of acknowledgement
Six Ways high baji Protects Your Privacy
Beyond the legal text, here is what our privacy commitment means in practice for every player on the high baji platform.
No Data Sales — Ever
high baji has never sold player data to a third party and never will. Your personal information is not a product. It is collected solely to provide you with a secure, personalised betting experience and to meet our legal obligations.
End-to-End Encryption
Every byte of data you share with high baji — from your registration form to your bKash deposit confirmation — travels over an encrypted 256-bit SSL connection. Sensitive data stored in our databases is encrypted at rest with AES-256, the same standard used by international financial institutions.
Full Data Subject Rights
Whether you want to access, correct, export, restrict, or delete your personal data, high baji gives you the tools and the dedicated support channel to exercise every right described in Section 7 — with a guaranteed 30-day response commitment, every time.
Minimum Data Collection
We collect only what we need. Each piece of data collected by high baji has a specific, documented purpose. We do not build speculative data profiles, do not collect sensitive data beyond KYC requirements, and do not retain data past its documented retention period.
Transparent Policy Updates
When this Privacy Policy changes in a material way, registered players receive 14 days' advance notice via email — in plain English, not buried in a footer update. You always know what you are agreeing to before any change takes effect.
Dedicated Privacy Support
Privacy questions at high baji are handled by a dedicated support team — not an automated FAQ bot. Every privacy enquiry receives a human response within 48 hours on Bangladesh Standard Time, every day of the year, including Eid, Pohela Boishakh, and public holidays.
Ready to Play at high baji?
Now that you have reviewed how high baji protects your privacy, explore everything the platform has to offer — from BPL cricket betting to live casino games, slots, and fishing games. All designed for players across Bangladesh.