Privacy Policy

1 Information We Collect

hii77 collects personal information through several channels: directly from you when you register an account or update your profile, automatically when you interact with our platform, and from third-party payment providers when you make a deposit or withdrawal. The categories of data we collect are set out below.

1.1 Registration and Account Data

When you create a hii77 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (for age verification purposes)
• Residential address, including city, district, and postal code
• Email address (used for account communications and security alerts)
• Bangladeshi mobile phone number (used for SMS verification and two-factor authentication)
• Username and encrypted password credentials
• Preferred currency (Bangladeshi Taka, BDT)

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to prevent fraud, underage gambling, and financial crime, hii77 may request the following documentary evidence at any stage of your account lifecycle:

• Copy of a valid government-issued photo ID (National ID card, passport, or driving licence)
• Proof of residential address dated within the last three months (utility bill, bank statement, or official correspondence)
• Selfie photograph or short video for biometric liveness verification
• Proof of payment method ownership (screenshot of mobile wallet registered in your name, or bank statement header)

KYC documents are processed securely and retained only for as long as required under applicable law. They are not used for any purpose other than identity verification and fraud prevention.

1.3 Transaction and Payment Data

When you deposit or withdraw funds, hii77 receives transaction metadata from your payment provider. This includes the mobile wallet number or bank account reference, transaction reference ID, amount, timestamp, and status. hii77 does not store full payment card numbers or mobile banking PINs. All payment processing is handled by the respective provider (bKash, Nagad, Rocket, Upay, or partner banks) under their own security standards.

1.4 Gameplay and Behavioural Data

hii77 automatically records gameplay activity including game titles played, wager amounts, session start and end times, and win/loss outcomes. This data is used for account statement generation, bonus eligibility assessment, responsible gaming monitoring, and platform optimisation. It is not shared with third parties for advertising purposes.

1.5 Device and Technical Data

When you access hii77 via a browser or mobile device, our servers automatically log certain technical data, including IP address, device type and operating system, browser type and version, referring URL, and session duration. This information is used for security monitoring, fraud detection, and platform performance analysis.

2 How We Use Your Data

hii77 processes your personal data only where we have a lawful basis for doing so. The primary legal bases we rely upon are: performance of a contract (operating your account), compliance with legal obligations, legitimate interests (fraud prevention, platform security), and, in limited cases, your explicit consent (such as marketing communications).

2.1 Account Operation and Service Delivery

Your registration data is used to create and maintain your account, verify your identity, process deposits and withdrawals, provide customer support, and send you transactional communications such as deposit confirmations, withdrawal notifications, and security alerts. These uses are necessary for the performance of the contract between you and hii77 and cannot be opted out of while your account remains active.

2.2 Fraud Prevention and Security

hii77 uses automated and manual systems to monitor account activity for signs of fraud, money laundering, bonus abuse, and unauthorised access. This processing is based on our legitimate interest in maintaining a secure and fair platform. Where suspicious activity is identified, we may temporarily restrict account access pending investigation, and in serious cases we may share relevant data with law enforcement authorities.

2.3 Responsible Gaming Monitoring

hii77 analyses gameplay and transaction patterns to identify players who may be exhibiting signs of problem gambling, such as rapid escalation of wager sizes, unusual session lengths, or repeated failed withdrawal requests. Where such patterns are identified, our responsible gaming team may reach out proactively. This processing is carried out in the legitimate interest of player welfare and in accordance with our Responsible Gaming policy.

2.4 Platform Improvement

Aggregated and anonymised behavioural data is used to improve the hii77 platform, prioritise feature development, optimise game loading performance, and enhance the overall player experience. No individually identifiable data is used for this purpose; all analytical datasets are anonymised before processing.

2.5 Marketing Communications

With your explicit opt-in consent, hii77 may send you promotional emails or SMS messages about new games, bonus offers, tournament announcements, and seasonal promotions such as BPL specials, Eid offers, and Pohela Boishakh campaigns. You can withdraw your marketing consent at any time by updating your account notification preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

3 Data Sharing & Disclosure

hii77 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only in the limited circumstances described in this section, and only to the extent necessary for the specified purpose.

3.1 Payment Processing Partners

To process deposits and withdrawals, hii77 shares the minimum necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank). Each of these partners processes your payment data under their own privacy policy and security standards. hii77 is not responsible for the data practices of independent payment providers beyond our contractual requirements with them.

3.2 Third-Party Game Providers

Games on the hii77 platform are powered by third-party studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. These providers may receive a session token and anonymised player identifier to facilitate game loading and result verification. They do not receive your full name, contact details, or payment information.

3.3 Legal and Regulatory Disclosures

hii77 may disclose your personal data to competent authorities, courts, or law enforcement agencies where required to do so by applicable law, court order, or legitimate regulatory request. Where possible and legally permitted, hii77 will notify the affected player of such a disclosure. Disclosures made in connection with the investigation of fraud, money laundering, or other criminal activity will be made without prior notice to the subject of the investigation.

3.4 Service Providers and Technology Partners

hii77 engages a limited number of trusted technology service providers to assist with platform hosting, data storage, email delivery, and customer support infrastructure. These providers act as data processors under contract with hii77 and are permitted to use your data only for the specific services they provide to hii77. They are prohibited from using it for their own purposes or sharing it with further parties.

4 Cookies & Tracking Technologies

hii77 uses cookies and similar browser-based technologies to operate the platform efficiently and securely. Cookies are small text files stored on your device by your browser when you visit hii77. The following categories of cookies are used on our platform:

4.1 Managing Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or security settings menu. Please note that disabling strictly necessary or fraud detection cookies will prevent hii77 from functioning correctly and may result in your session being terminated for security reasons.

4.2 No Third-Party Advertising Cookies

hii77 does not deploy third-party behavioural advertising cookies or tracking pixels that follow your activity across other websites. We do not participate in cross-site advertising networks or retargeting programmes. Any analytics cookies used on hii77 are scoped to our own domain and do not share data with external advertising platforms.

5 Data Retention & Storage

hii77 retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The retention periods applicable to key data categories are as follows:

• Account and registration data: Retained for the duration of your active account plus 5 years following account closure, to satisfy record-keeping obligations related to anti-money laundering and fraud prevention.
• Transaction records: Retained for 7 years from the date of the transaction, in line with standard financial record-keeping requirements.
• KYC documents: Retained for 5 years following account closure or the completion of the last transaction, whichever is later.
• Gameplay logs: Retained for 3 years from the date of the session, used for dispute resolution and responsible gaming monitoring.
• Technical and device logs: Retained for 12 months on a rolling basis, used for security investigation and platform performance review.
• Marketing consent records: Retained for 3 years from the date of consent, or until consent is withdrawn, whichever is earlier.

5.1 Data Storage Location

hii77 stores player data on secure servers with appropriate physical and logical access controls. Data may be stored and processed outside of Bangladesh by our technology infrastructure partners. Where such transfers occur, hii77 ensures that contractual protections are in place to maintain the same level of data security as would apply within Bangladesh.

5.2 Deletion After Retention Period

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual. Deletion is carried out in a manner that prevents recovery. Anonymised data derived from your account may be retained indefinitely for statistical and platform improvement purposes.

6 Your Privacy Rights

As a player on the hii77 platform, you have a number of rights in relation to your personal data. hii77 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact [email protected] with the subject line "Privacy Rights Request" and include your registered account email address for verification purposes.

7 Security Measures

hii77 implements a layered set of technical and organisational security measures to protect player data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security programme includes the following controls:

• TLS/SSL Encryption: All data in transit between your browser and our servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously.
• Password Hashing: Account passwords are stored using a one-way cryptographic hashing algorithm with a unique per-account salt. Plaintext passwords are never stored or logged.
• Two-Factor Authentication: SMS-based two-factor authentication is available to all players and is strongly recommended. Players with 2FA enabled receive an additional verification prompt on any new device or browser login.
• Access Controls: Access to production data systems is restricted to a limited number of authorised personnel who require it to perform their job functions. All internal access is logged and subject to periodic review.
• Intrusion Detection: hii77's infrastructure is monitored continuously for anomalous access patterns, brute-force attempts, and injection attacks. Automated blocking rules are applied in real time.
• Regular Security Reviews: hii77 conducts periodic internal security assessments and works with third-party specialists to identify and address potential vulnerabilities in the platform.

7.1 Data Breach Response

In the event of a data breach that poses a risk to the rights and freedoms of affected players, hii77 will notify affected players via their registered email address within 72 hours of becoming aware of the breach, where it is feasible to do so. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures hii77 has taken or is taking in response.

8 Policy Updates & Contact

hii77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, registered players will be notified by email at the address on file. The updated policy will be published on this page with a revised effective date. Continued use of the hii77 platform after the effective date of any update constitutes acceptance of the revised policy.

8.1 Minor Updates

Corrections of typographical errors, clarifications that do not change the substance of the policy, or updates to reflect minor operational changes may be made without individual notification. In such cases, the revised effective date at the top of this document will be updated to reflect the date of the change. We encourage you to review this page periodically.

8.2 Contact for Privacy Matters

All privacy-related queries, data subject access requests, erasure requests, objections, and complaints should be directed to our support team. Please include your registered account email address in any correspondence to allow us to verify your identity and locate your account record efficiently.

Contact method: [email protected] — please use the subject line "Privacy Rights Request" for data-related queries to ensure your message is routed to the appropriate team. Our support team is available 24 hours a day, 7 days a week, with an average response time of 2–5 minutes via live chat and within 48 hours for email correspondence.