heygen Privacy Policy

1. Introduction

heygen ("heygen", "we", "us", "our") operates the online gaming and sports betting platform accessible at heygen.biz. We are committed to protecting the privacy and security of the personal information entrusted to us by our players and website visitors. This Privacy Policy ("Policy") explains in plain and transparent language how heygen collects, uses, stores, shares, and protects your personal data when you access or use the heygen platform.

By registering an account on heygen, or by continuing to use the heygen platform after this Policy has been made available to you, you acknowledge that you have read, understood, and consent to the data practices described herein. If you do not agree to this Policy, you must cease using the heygen platform immediately.

This Policy should be read alongside heygen's Terms and Conditions, which are available at heygen.biz/terms-conditions and which form part of the same overall agreement governing your use of the heygen platform.

2. Data Controller

For the purposes of applicable data protection legislation, heygen acts as the data controller in respect of the personal data collected from its registered players and website visitors. As data controller, heygen determines the purposes and means by which personal data is processed. If you have any questions or concerns about how heygen handles your personal data, you can contact our data protection point of contact at [email protected].

3. Data We Collect

heygen collects the following categories of personal data from its players and platform users:

3.1 Registration Data

When you create a heygen account, we collect the information you provide during the registration process, which typically includes:

• Full legal name
• Date of birth (to verify the 18+ age requirement)
• Email address
• Mobile phone number
• Residential address (city, district, and country)
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, ৳)

3.2 Identity Verification Data

Where heygen is required to verify your identity in accordance with its know-your-customer (KYC) procedures, we may also collect copies of:

• National identity card (NID)
• Passport or driver's licence
• Proof of address documents such as utility bills or bank statements
• Proof of ownership of a payment method (e.g., screenshot of bKash or Nagad account)

3.3 Financial Transaction Data

When you make deposits or withdrawal requests on heygen, we collect records of those transactions, including amounts, timestamps, payment method identifiers, and transaction reference numbers. heygen does not store full mobile banking PIN numbers, full bank account passwords, or complete card numbers.

3.4 Platform Usage Data

heygen automatically collects certain technical and behavioural data when you access the platform, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session start and end times
• Pages and features accessed within the heygen platform
• Games played, bets placed, and betting patterns (in aggregate for platform improvement purposes)
• Referral source (i.e., how you arrived at the heygen platform)
• Cookie identifiers and similar tracking technology data

3.5 Communications Data

When you contact heygen's customer support team, submit a complaint, or correspond with us by any means, we retain records of that correspondence, including the content of messages, timestamps, and any attachments submitted.

4. How We Collect Data

heygen collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — through cookies, session tokens, and server logs when you access the heygen website or platform.
• From third-party payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank may share transaction confirmation data with heygen for the purpose of crediting deposits and processing withdrawals.
• From identity verification partners — where heygen engages third-party KYC service providers to assist in verifying the identity documents you submit.
• From fraud prevention services — heygen may receive risk-signal data from third-party fraud detection and anti-money-laundering screening services in order to protect the integrity of the platform.

5. How We Use Your Data

heygen uses the personal data it collects for the following purposes:

• Account creation and management — to register your heygen account, authenticate your identity at login, and maintain accurate account records.
• Age and identity verification — to confirm that you meet the 18+ age requirement and to complete mandatory KYC checks.
• Transaction processing — to process deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, and partner banks, and to maintain accurate financial records.
• Platform operation and personalisation — to deliver a functional, personalised gaming experience, remember your preferences, and improve platform performance.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other security threats.
• Responsible gaming — to monitor gaming behaviour patterns and, where necessary, apply responsible gaming measures such as deposit limits or account cooling-off periods.
• Legal and regulatory compliance — to comply with any applicable legal obligations, respond to lawful requests from competent authorities, and enforce our Terms and Conditions.
• Customer support — to respond to your enquiries, resolve complaints, and provide technical assistance.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have provided your consent to receive such communications. You may opt out at any time.
• Analytics and platform improvement — to analyse aggregated usage data in order to understand how the heygen platform is used and to identify areas for improvement.

6. Legal Basis for Processing

heygen processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations under the Terms and Conditions you have accepted, including account management, transaction processing, and platform access.
• Legal obligation — processing required to comply with applicable laws, including anti-money-laundering regulations, know-your-customer requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests — processing carried out for heygen's legitimate business interests, such as fraud detection, security monitoring, and platform analytics, where those interests are not overridden by your privacy rights.
• Consent — processing carried out on the basis of your explicit consent, such as the sending of marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

heygen does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipient, strictly to the extent necessary for the stated purpose:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, for the purpose of processing deposits and withdrawals.
• Identity verification providers — third-party KYC and document verification services engaged to assist with age and identity checks.
• Fraud and AML screening services — third-party providers that assist heygen in identifying and preventing fraudulent transactions and money laundering activity.
• Game software providers — suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their game content within the heygen platform.
• Legal and regulatory authorities — where heygen is required by law, court order, or regulatory directive to disclose personal data to a competent authority, we will comply with that obligation. Where permitted, we will endeavour to notify you prior to such disclosure.
• Business successors — in the event of a merger, acquisition, or sale of heygen's business or assets, personal data held by heygen may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

All third parties with whom heygen shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the one for which it was shared.

8. Payment Data

8.1 When you initiate a deposit or withdrawal on heygen, you will interact directly with the interface of your chosen payment provider — bKash, Nagad, Rocket, Upay, or a partner bank. heygen does not store your mobile banking PIN, full bank account login credentials, or complete payment card details on its servers.

8.2 heygen retains records of transaction amounts, dates, payment method types, and transaction reference numbers for accounting, fraud prevention, and regulatory compliance purposes. These records may be retained for a period of up to seven (7) years from the date of the transaction.

8.3 All financial data transmitted between your device and the heygen platform is protected by 256-bit SSL encryption in transit. heygen does not accept responsibility for security breaches that occur within the systems of third-party payment processors, which are governed by their own independent security and privacy policies.

9. Cookies & Tracking Technologies

9.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. heygen uses cookies and similar technologies (such as session tokens and local storage) to operate the platform effectively and to improve your experience.

9.2 Types of Cookies We Use.

• Essential cookies — strictly necessary for the heygen platform to function. These cookies manage your login session and maintain security. They cannot be disabled without impairing platform functionality.
• Preference cookies — used to remember your settings and preferences, such as your chosen game category or language preference.
• Analytics cookies — used to collect anonymised, aggregated data about how users interact with the heygen platform, enabling us to identify performance issues and improve the user experience.
• Security cookies — used to detect and prevent fraudulent activity, bot access, and other security threats to the platform.

9.3 Managing Cookies. You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may limit the functionality of the heygen platform or prevent you from accessing certain features. Instructions for managing cookies in the most commonly used browsers are available through your browser's help documentation.

10. Data Retention

heygen retains your personal data for as long as your heygen account remains active, and for a further period thereafter as required by applicable legal and regulatory obligations. Specifically:

• Account data — retained for the duration of your account plus a minimum of five (5) years following account closure, to meet anti-money-laundering record-keeping requirements.
• Financial transaction records — retained for a minimum of seven (7) years from the date of each transaction.
• Identity verification documents — retained for the duration of the account plus five (5) years following account closure.
• Support correspondence — retained for three (3) years from the date of the last communication in a given support thread.
• Marketing consent records — retained for three (3) years from the date of last consent confirmation or opt-out.

Once a retention period expires, heygen will securely delete or anonymise the relevant personal data in accordance with our internal data disposal procedures.

11. Data Security

heygen implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the heygen platform.
• Encrypted storage of passwords using industry-standard hashing algorithms. heygen staff cannot view your password in plain text.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular internal security audits and vulnerability assessments of the heygen platform infrastructure.
• Incident response procedures in place to detect, report, and address any personal data breach in a timely manner.

Despite these measures, no digital security system can guarantee absolute protection against all threats. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, heygen will notify affected players as soon as practicable and will take all reasonable steps to mitigate the impact.

12. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by heygen:

• Right of access — you may request a copy of the personal data heygen holds about you.
• Right to rectification — you may request that heygen correct any inaccurate or incomplete personal data.
• Right to erasure — in certain circumstances you may request that heygen delete your personal data. Note that this right is subject to heygen's legal obligations to retain certain records.
• Right to restriction of processing — you may request that heygen restrict the processing of your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability — where processing is based on your consent or on a contract, you may request that heygen provide your personal data in a structured, machine-readable format.
• Right to withdraw consent — where processing is based on consent (for example, marketing communications), you may withdraw that consent at any time by contacting us or clicking the unsubscribe link in any marketing email.
• Right to object — you may object to processing carried out on the basis of heygen's legitimate interests, subject to heygen demonstrating compelling legitimate grounds for the processing.

To exercise any of the above rights, please contact heygen's support team by email at [email protected]. We aim to respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, we may extend this period by a further two months, in which case we will notify you of the extension and the reason for it.

13. Children's Privacy

The heygen platform is strictly intended for adults aged 18 years and above. heygen does not knowingly collect, process, or store personal data from individuals under the age of 18. If heygen becomes aware that personal data has been collected from a minor, it will immediately suspend the relevant account, delete the associated personal data, and take appropriate steps to prevent any recurrence.

If you are a parent or legal guardian and believe that a minor in your care has registered on the heygen platform or provided personal data to heygen, please contact us immediately at [email protected] so that we can investigate and take prompt corrective action.

14. Changes to This Policy

heygen reserves the right to update, amend, or replace this Privacy Policy at any time. When we make material changes to the Policy, we will publish the revised version on the heygen platform with an updated effective date at the top of the document. Where the changes are significant, we will endeavour to notify registered players by email.

Your continued use of the heygen platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to remain informed about how heygen protects your personal data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way heygen handles your personal data, please contact us using the details below. Our team is available 24 hours a day, seven days a week.

• Email: [email protected] (plain text — not a clickable link)
• Website: heygen.biz
• Response time: heygen aims to respond to all privacy-related enquiries within 30 calendar days.

Note: heygen operates as an offshore gaming platform. Online gambling laws in Bangladesh are ambiguous. Players are solely responsible for ensuring their participation complies with local regulations. This Privacy Policy does not constitute legal advice. 18+ only. Please gamble responsibly.