hii77 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

Who We Are

hii77 (referred to throughout this Privacy Policy as "hii77", "we", "us", or "our") is the operator of the online betting and gaming platform available at https://hii77.io. hii77 is the data controller responsible for the personal information collected from users — referred to in this policy as "you", "the Player", or "the User" — in connection with your registration, use of services, deposits, withdrawals, and any other interaction with the hii77 platform.

hii77 is operated primarily for players based in Bangladesh. The platform is designed and administered with Bangladesh market requirements and Bangladesh player needs as the primary considerations. All personal data processing activities described in this Privacy Policy are conducted with appropriate technical and organisational safeguards appropriate to the platform's Bangladesh-market context.

This Privacy Policy applies to all personal data collected through hii77.io, including through mobile browser access. It does not apply to third-party websites, game provider platforms (such as Pragmatic Play, Evolution Gaming, or Ezugi), or payment processors (such as bKash, Nagad, or Rocket) — each of which operates under its own separate privacy policy and data governance framework.

Personal Data We Collect

hii77 collects personal data in the categories described below. The specific data collected in each category depends on the services you use and the interactions you have with the platform.

hii77 does not collect any special categories of sensitive personal data — such as health data, racial or ethnic origin, religious beliefs, or political opinions — as part of its standard account and service operations.

How We Collect Your Data

hii77 collects personal data through the following channels:

• Direct interactions: Data you provide when registering your hii77 account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or completing any on-platform form or survey.
• Automated technologies: Data collected automatically as you browse and use the hii77 platform — including cookies, log files, pixel tags, and similar tracking technologies that record your device identifiers, IP address, session activity, and navigation behaviour.
• Third-party service providers: Data received from our payment processors (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard) that is necessary to complete and verify financial transactions; and from identity verification providers used during KYC processing.
• Game providers: Aggregated session and outcome data from third-party game studios (such as Pragmatic Play, PG Soft, JILI, Evolution Gaming, and Ezugi) necessary for game history records, dispute resolution, and responsible gaming monitoring.

How We Use Your Personal Data

hii77 uses the personal data it collects for the following purposes:

• Account Registration and Management: Creating and maintaining your hii77 account; verifying your identity; enabling login via mobile number or email with optional 2FA; managing account security settings.
• Service Delivery: Providing you with access to betting markets, live casino tables, slot games, and all other features of the hii77 platform; processing deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods; managing your BDT wallet balance.
• KYC and Regulatory Compliance: Verifying your identity and age (21+) as required prior to processing withdrawals; meeting anti-money-laundering (AML) and counter-terrorist financing (CTF) obligations; maintaining records required by applicable law.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, bonus abuse, match-fixing, and money laundering; monitoring for unusual transaction patterns; enforcing hii77's Terms and Conditions.
• Customer Support: Responding to your queries, complaints, and disputes via live chat, email, and other support channels; maintaining records of support interactions for quality and training purposes.
• Responsible Gaming: Monitoring gaming behaviour for indicators of problem gambling; applying deposit limits, session controls, or account restrictions where appropriate; administering self-exclusion periods; providing responsible gaming resources and communications.
• Platform Improvement: Analysing usage data to improve the hii77 platform's features, performance, and user experience; conducting A/B testing and analytics to optimise the Bangladesh-market product.
• Marketing Communications: Sending promotional offers, bonus notifications, and cricket season updates to Players who have opted in to receive marketing communications. See Section 13 for full details on marketing preferences and opt-out options.

Legal Basis for Processing

hii77 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the contract between you and hii77 — i.e., to operate your account, accept bets, process payments, and deliver the services you have signed up for. Without this processing, hii77 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable legal requirements — including KYC identity verification, AML record-keeping, age verification enforcement, and cooperation with law enforcement or regulatory bodies.
• Legitimate Interests: Processing undertaken in hii77's legitimate interest of operating a secure, fair, and fraud-free platform — including fraud detection, security monitoring, responsible gaming oversight, and platform analytics — provided those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications where you have given explicit consent. You may withdraw this consent at any time via your account notification preferences or by contacting hii77 support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

Sharing Your Personal Data

hii77 does not sell, rent, or trade your personal data. We share your data externally only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card network processors receive financial data necessary to process your deposits and withdrawals. Each payment processor operates under its own privacy policy and data security framework.
• Game Providers: Third-party game studios (Pragmatic Play, PG Soft, JILI, Evolution Gaming, Ezugi, NetEnt, Microgaming) receive limited session data necessary to deliver game content, record outcomes, and support dispute resolution.
• KYC and Identity Verification Providers: Third-party identity verification services receive the documents you submit for KYC — national ID, passport, or address proof — solely for the purpose of verifying your identity against the submitted documents.
• Technology and Hosting Partners: Cloud infrastructure, database, and cybersecurity service providers who process data on hii77's behalf under strict data processing agreements and who are permitted to use your data only as instructed by hii77.
• Legal and Regulatory Authorities: Government agencies, law enforcement bodies, financial intelligence units, and regulatory authorities in Bangladesh and internationally where hii77 is legally required or compelled by court order to disclose your data.
• Professional Advisors: Legal counsel, accountants, and auditors who are bound by professional confidentiality obligations and who require access to data in connection with their professional services to hii77.

All third parties with whom hii77 shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with hii77's instructions and applicable data protection requirements.

International Data Transfers

hii77's primary operations and data infrastructure are designed to serve the Bangladesh market. However, some of hii77's third-party service providers — including game studio providers and cloud infrastructure partners — may process data in jurisdictions outside Bangladesh. Where such transfers occur, hii77 takes reasonable steps to ensure that appropriate safeguards are in place to protect the security and confidentiality of your data in transit and at the destination.

These safeguards may include contractual clauses requiring the recipient to apply data protection standards equivalent to those applied by hii77, as well as technical encryption and access controls applied at the point of transfer. hii77 does not transfer your personal data to jurisdictions known to have inadequate data protection frameworks without appropriate safeguards in place.

Data Security

hii77 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and hii77's servers is encrypted using Transport Layer Security (TLS 1.2 or higher). The padlock icon visible in your browser's address bar when accessing hii77 confirms this encryption is active.
• Two-Factor Authentication (2FA): hii77 offers and recommends two-factor authentication for all player accounts — an OTP sent to your registered mobile number (+880) is required in addition to your password when logging in from an unrecognised device.
• Role-Based Access Controls: Internal access to personal data is restricted to hii77 personnel with a verified operational need. Access rights are reviewed regularly and revoked promptly when staff roles change.
• Session Security: hii77 automatically logs out inactive sessions after a configurable period and monitors for anomalous login activity — including logins from unusual geographic locations or devices — which may trigger additional verification steps.
• Data Minimisation at Storage: hii77 stores only the minimum data required for operational purposes. Payment card data is not stored on hii77's systems — card transactions are processed and tokenised by PCI DSS-compliant payment processors.
• Incident Response: hii77 maintains a documented data breach response procedure. In the event of a confirmed security incident affecting your personal data, hii77 will notify affected players promptly with information about the incident and recommended protective actions.

Despite these measures, no internet-based service can guarantee absolute security. hii77 encourages all Bangladesh players to use a strong, unique password for their hii77 account and to enable 2FA to maximise account security.

Data Retention Periods

hii77 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account Data: Retained for the duration of your active hii77 account plus a minimum of 5 years after account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of submission or the date of account closure, whichever is later, in compliance with applicable AML record-keeping requirements.
• Transaction Records: Deposit and withdrawal history retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping requirements.
• Betting and Gaming History: Retained for the duration of your active account plus 2 years after account closure, for dispute resolution and responsible gaming monitoring purposes.
• Customer Support Records: Live chat transcripts and email correspondence retained for 2 years from the date of the relevant interaction.
• Marketing Preference Records: Opt-in and opt-out records retained for the duration of your account plus 2 years, as evidence of consent status.
• Technical and Usage Logs: Generally retained for 90 days for security monitoring purposes, unless a specific incident under investigation requires longer retention.

In all cases, hii77 retains data for longer periods only where required by applicable law, ongoing regulatory investigation, or active legal proceedings involving your account.

Your Data Protection Rights

Subject to applicable law and certain conditions, you have the following rights in relation to the personal data hii77 holds about you. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and sufficient information to verify your identity.

hii77 will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or numerous, hii77 may extend this period by a further 60 days and will notify you of the extension and reasons within the initial 30-day window.

hii77 may decline requests where complying would be incompatible with hii77's legal obligations — for example, where anti-money-laundering regulations require retention of financial records, hii77 cannot delete those records on request regardless of the circumstances.

Cookies and Similar Technologies

hii77 uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device when you visit a website. Cookies allow hii77 to recognise your device, maintain your session, and provide a personalised experience.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling essential cookies will impair your ability to log in and use hii77 services. For detailed browser-specific cookie management instructions, consult your browser's help documentation.

Children's Privacy

hii77 is an online betting and gaming platform intended exclusively for adults aged 21 years and above. hii77 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

If hii77 discovers or is informed that an account has been created by or on behalf of a person under 21, that account will be immediately suspended, all activity voided, and personal data associated with the underage account deleted as soon as practically possible after the mandatory regulatory retention period has been satisfied.

If you are a parent or guardian and you believe that a person under 21 in your care has created a hii77 account, please contact hii77 support immediately at [email protected]. hii77 will take prompt action to investigate and close the account concerned.

Marketing Communications

With your consent, hii77 may send you marketing communications via email and SMS — including promotional offers, bonus notifications, cricket betting boosts (BPL, IPL, T20 World Cup), and seasonal promotions tied to events such as Eid, Pohela Boishakh, or major ICC tournaments.

You can manage your marketing preferences at any time:

• Via Account Settings: Navigate to your hii77 profile, select Notification Preferences, and adjust your email and SMS marketing opt-in status.
• Via Unsubscribe Link: Every marketing email from hii77 contains an unsubscribe link. Clicking this link will remove you from the relevant mailing list within 5 business days.
• Via Support: Contact hii77 support at [email protected] requesting removal from marketing communications. Include your registered mobile number or email address in your request.

Opting out of marketing communications will not affect your receipt of transactional service emails — such as deposit confirmation, withdrawal notification, KYC status updates, or password reset instructions — which are necessary for the operation of your hii77 account and are not subject to marketing opt-out.

Third-Party Links

The hii77 platform may contain references to third-party services — including game provider studios, payment processors, and sports data providers. These third-party services operate under their own independent privacy policies and data governance frameworks. hii77 is not responsible for the privacy practices of any third-party service and does not endorse or make any representations regarding third-party privacy standards.

We encourage you to review the privacy policy of any third-party service you interact with in connection with your hii77 account — including your mobile wallet provider (bKash, Nagad, or Rocket) and any game studio whose titles you play on the hii77 platform — to understand how they collect, use, and protect your personal data independently of hii77.

Changes to This Privacy Policy

hii77 reserves the right to amend this Privacy Policy at any time. Changes may be made to reflect updates to hii77's data practices, new legal requirements, changes in the services offered, or improvements to how hii77 explains its data handling to Bangladesh players.

Where changes are material — i.e., they significantly affect how hii77 uses your personal data or the rights available to you — hii77 will provide advance notice via a prominently displayed notice on the hii77 platform and/or by email to your registered address at least 14 days before the changes take effect.

Where changes are minor — such as clarifications of existing practices, corrections of typographical errors, or structural reorganisation without substantive content change — hii77 may update the policy without advance notice, but will update the "Last Reviewed" date at the top of the policy.

The most current version of hii77's Privacy Policy is always available at hii77.io/privacy-policy. Your continued use of hii77's services after any revision constitutes your acceptance of the revised Privacy Policy. If you do not agree with any change, you must stop using hii77 and may request account closure by contacting support.

Contact Us

For any question, concern, or request relating to this Privacy Policy, your personal data held by hii77, or your data protection rights, please contact hii77 using the channels below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Live Chat: Available 24/7 via the hii77 platform · Average response: 2–5 minutes
• Languages: English and Bengali
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

hii77 will acknowledge receipt of all privacy-related enquiries within 48 hours and will provide a substantive response within 30 days where a formal data rights request has been submitted. Where additional time is required to process a complex request, hii77 will notify you of the extended timeline within the initial 30-day window.