Privacy Policy — hi77com

hi77com ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every player who uses our services. This Privacy Policy explains what personal information hi77com collects from users in Bangladesh, how that information is used and stored, with whom it may be shared, and what rights you have in relation to your personal data.

This policy applies to all data collected through the hi77com website, account registration forms, deposit and withdrawal processes, live chat and email support interactions, promotional participation, and any other direct or indirect interaction you have with our platform. It does not apply to third-party websites, payment processors, or gaming software providers that operate under their own independent privacy frameworks — although we take reasonable steps to ensure that all third parties we work with uphold appropriate privacy standards.

By registering an account on hi77com, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please do not register or continue to use the platform. This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming guidelines, which together form the full agreement governing your use of hi77com.

This policy is written in English and represents the authoritative version governing all privacy matters related to your hi77com account. It is reviewed and updated periodically to reflect changes in our data practices, applicable law, or regulatory guidance. The effective date of the current version is stated at the top of this page.

hi77com collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the website, and from third-party service providers involved in payment processing and identity verification. The categories of data we collect are outlined below.

Identity & Registration Data

When you create a hi77com account, we collect:

• Full legal name (as it appears on your National ID Card or passport)
• Date of birth (to confirm you are aged 18 or above)
• Residential address in Bangladesh (city, district, and postal code)
• Email address (used for account communications and security alerts)
• Mobile phone number (linked to your preferred BDT payment method)
• Username and hashed password (the password itself is never stored in readable form)

Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and prevent fraud and money laundering, we may request copies of government-issued identity documents such as your National ID Card (NID), passport, or birth certificate, as well as proof of address (e.g., a recent utility bill or bank statement) and proof of ownership of your registered bKash, Nagad, Rocket, or Upay account.

Financial Transaction Data

• Deposit amounts, timestamps, and originating payment method details (bKash number, Nagad number, Rocket, Upay, Visa/Mastercard last four digits)
• Withdrawal requests, amounts, and destination account details
• Account balance history and transaction logs
• Bonus and promotional credit records

Gameplay & Betting Data

• Betting history, wager amounts, selected markets, and settlement outcomes
• Casino game session data including game title, provider, stake, result, and session duration
• Crash game and instant-win round data (provably fair seed records)
• Session login times, logout times, and total session durations

Technical & Device Data

• IP address and approximate geolocation (country and city level)
• Browser type, version, and operating system
• Device type (desktop, mobile, tablet) and screen resolution
• Referral URL and pages visited within the hi77com platform
• Cookie identifiers and session tokens (see Section 6 for details)

Support & Communication Data

When you contact our support team via live chat, email, or WhatsApp, we retain records of those conversations including your account details, the nature of the query, timestamps, and the resolution provided. These records are used for quality assurance, dispute resolution, and regulatory compliance purposes.

hi77com uses your personal data for specific, legitimate purposes directly related to the operation of our Bangladesh betting and casino platform. We do not use your data for any purpose incompatible with the reasons it was originally collected.

hi77com processes your personal data on one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to fulfil our obligations to you under the account agreement — including operating your account, processing transactions, and delivering the services you have requested.
• Legal Obligation: Processing required for hi77com to comply with applicable laws, including anti-money laundering (AML) regulations, age verification obligations, and financial record-keeping requirements.
• Legitimate Interests: Processing carried out for purposes that are reasonably necessary for the secure and effective operation of the platform — such as fraud prevention, security monitoring, responsible gaming oversight, and platform analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on a specific, freely given, informed, and unambiguous agreement from you — most commonly applicable to marketing communications and optional data-sharing preferences. Consent can be withdrawn at any time without affecting the lawfulness of processing that occurred before the withdrawal.

Where hi77com relies on legitimate interests as the legal basis for processing, we conduct a balancing test to ensure that our interests do not disproportionately override your right to privacy. If you would like more information about how this balancing test was applied to a specific processing activity, please contact us at support@hi77com.

hi77com may share your personal data with the following categories of third parties, under strict contractual or legal obligations:

Payment Processors

To process BDT deposits and withdrawals, we share relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). These processors receive only the minimum data required to execute the transaction and are bound by their own privacy and security obligations. hi77com does not store full card numbers on its servers.

Identity Verification Providers

For KYC compliance, we may share identity documents and personal details with third-party identity verification service providers. These providers process your KYC data solely for the purpose of verifying your identity on behalf of hi77com and are contractually prohibited from using this data for any other purpose.

Game Software Providers

When you play games powered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — limited technical data (such as a session token and stake information) is shared with those providers to enable game delivery and result settlement. These studios operate under their own licences and privacy frameworks, which we assess prior to integration.

Fraud Prevention & Security Services

hi77com uses third-party fraud detection and cybersecurity services that may process device fingerprints, IP addresses, and transaction patterns to identify and prevent fraudulent activity on the platform. Data shared with these services is processed under data processing agreements that restrict its use to security purposes only.

Legal & Regulatory Authorities

hi77com may be required to disclose personal data to law enforcement agencies, financial regulators, or courts of competent jurisdiction where required by applicable Bangladeshi law or pursuant to a valid legal process. In such cases, we will disclose only the minimum information required and will endeavour to notify you of such disclosure where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of hi77com's business assets, player account data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer via your registered email address, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

hi77com uses cookies and similar tracking technologies to provide core platform functionality, maintain session security, analyse usage patterns, and deliver a personalised experience. By using the hi77com platform, you agree to the use of cookies as described in this section.

Types of Cookies We Use

Managing Your Cookie Preferences

You can manage or disable non-essential cookies at any time through your browser settings. Disabling essential or security cookies may impair your ability to log in or use core platform features. Instructions for managing cookies are available in the help documentation of all major browsers (Chrome, Firefox, Safari, Edge, Samsung Internet).

hi77com retains personal data only for as long as it is necessary to fulfil the purposes for which it was originally collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:

• Active Account Data (identity, contact, gameplay, transaction records): Retained for the full duration of your active account relationship with hi77com.
• KYC & Identity Verification Documents: Retained for a minimum of 5 years from the date of verification, in line with anti-money laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, to satisfy financial regulatory and audit requirements.
• Betting & Game History: Retained for a minimum of 3 years from the date of each session, to support dispute resolution and responsible gaming monitoring.
• Support Communication Records: Retained for 2 years from the date of each interaction, unless the matter relates to an unresolved dispute, in which case records are retained until the dispute is formally closed.
• Closed Account Data: Following voluntary or involuntary account closure, your personal data is retained for a minimum of 5 years to comply with AML obligations, before being securely deleted or fully anonymised.
• Marketing Consent Records: Retained for as long as your marketing consent remains active, plus an additional 12 months after withdrawal to demonstrate compliance.

At the end of the applicable retention period, personal data is securely deleted from hi77com's systems using industry-standard data erasure procedures. Where full deletion is not immediately possible due to backup system architecture, data is isolated and rendered inaccessible until it can be permanently purged during the next scheduled backup rotation cycle.

As a player on hi77com, you have the following rights in relation to your personal data. To exercise any of these rights, contact our privacy team at support@hi77com with the subject line "Data Rights Request", including your registered account email and a description of your request. We will respond within 30 days of receiving a verified request.

• Right of Access: You may request a copy of the personal data hi77com holds about you, including details of the purposes for which it is processed and the third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account name or date of birth corrections, identity document verification will be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. Note that this right is subject to hi77com's legal obligation to retain certain records (see Section 7).
• Right to Restrict Processing: You may request that hi77com restricts the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a complaint is being investigated.
• Right to Data Portability: You may request that hi77com provides you with a copy of your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests, including profiling for responsible gaming monitoring purposes. hi77com will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

hi77com employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. While no system can guarantee absolute security, our layered approach significantly reduces the risk of data breaches.

Technical Controls

• 256-bit SSL/TLS encryption on all data in transit between your device and hi77com servers
• AES-256 encryption for sensitive data at rest, including identity documents and financial records
• One-way hashing with salt (bcrypt) for all stored account passwords — plaintext passwords are never stored or accessible by staff
• Two-factor authentication (2FA) via OTP for all player account logins and staff access to administrative systems
• Web Application Firewall (WAF) and DDoS protection to prevent malicious traffic from reaching the platform
• Regular automated vulnerability scanning and periodic penetration testing by independent security professionals

Organisational Controls

• Access to player personal data by hi77com staff is granted on a strict need-to-know basis and subject to role-based access controls
• All staff who handle personal data are trained in data protection principles and are bound by confidentiality obligations
• Data processing agreements are in place with all third-party service providers who handle player data on behalf of hi77com
• Security incident response procedures are maintained and tested regularly to enable rapid containment and notification in the event of a breach

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, hi77com will notify affected players without undue delay via their registered email address, providing details of the nature of the breach, the data affected, the likely consequences, and the steps we have taken to address it. We are committed to transparent and timely communication in the event of any security incident.

Age verification is a mandatory step in the hi77com registration and KYC process. All players are required to confirm their date of birth at registration and, upon request, provide documentary proof of age. Accounts where the holder is found to be under 18 will be immediately suspended and closed, all funds will be returned to the source payment method where possible, and the matter may be referred to relevant authorities.

If you are the parent or guardian of a minor and have reason to believe that your child has registered on hi77com or provided us with personal data, please contact us immediately at support@hi77com. We will investigate and, if confirmed, promptly delete all data associated with the minor's account.

hi77com also recommends that parents and guardians who share devices with minors make use of available parental control software and filtering tools to prevent access to gambling websites. Organisations such as GamCare and Gambling Therapy provide free resources and guidance on protecting minors from exposure to gambling content.

hi77com reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, applicable law, or regulatory guidance. The effective date at the top of this page will be updated whenever a new version is published.

When we make material changes to this Privacy Policy — particularly those that affect how we collect or use your personal data, or that alter your rights — we will provide prior notice by displaying a prominent notification on the hi77com platform homepage and by sending an email to your registered address at least 14 days before the changes take effect.

For minor changes (such as clarifications of existing practices, corrections of typographical errors, or additions that do not reduce your rights), we may update the policy without advance notice beyond updating the effective date. Your continued use of the hi77com platform after any changes to this policy take effect constitutes your acceptance of the revised version.

If you do not agree with a revised version of the Privacy Policy, you should stop using the platform and request account closure in accordance with Section 9 of our Terms & Conditions. Previous versions of this Privacy Policy are available upon request by contacting our privacy team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hi77com handles your personal data, please contact our dedicated privacy team using the details below. We are committed to addressing all privacy-related enquiries promptly, professionally, and in confidence.

When submitting a privacy-related request or complaint, please include your registered account email address, a clear description of your request or concern, and any relevant reference numbers if you are following up on a previous enquiry. This helps our team locate your account records quickly and respond as efficiently as possible.

If you are not satisfied with the outcome of a complaint submitted to hi77com's privacy team, you have the right to escalate the matter to the appropriate data protection authority or seek independent legal advice. hi77com takes all privacy complaints seriously and will cooperate fully with any formal investigation process.

For responsible gaming concerns — including requests for self-exclusion, deposit limits, or cooling-off periods — please visit our dedicated Responsible Gaming page or contact our support team directly. All responsible gaming requests are treated as high priority and actioned within 24 hours of receipt.