hb77 Privacy Policy

hb77 collects personal data across several categories depending on how you interact with the platform. The categories below describe what we collect, the source of that data, and the primary reason for its collection.

Registration and Identity Data

When you create an hb77 account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create and maintain your account, to verify that you meet the minimum age requirement of 18 years, and to comply with Know Your Customer (KYC) obligations. You may subsequently be asked to submit a copy of your National Identity Card (NID), passport, or driving licence to complete identity verification before withdrawals are processed.

Financial and Transaction Data

Every deposit and withdrawal you make on hb77 generates a transaction record. We retain the amount in BDT, the date and time of the transaction, the payment method used (bKash, Nagad, Rocket, or Upay), and the mobile wallet account number associated with the transaction. We do not store full payment credentials — your PIN or wallet password is never transmitted to or stored by hb77.

Betting and Gaming Activity Data

We maintain a full record of your betting and gaming activity on the hb77 platform, including the matches, markets, and games you have participated in; the stake amounts in BDT; the outcomes; and your account balance history. This data is used to operate the platform, detect fraud, monitor for responsible gaming indicators, and resolve any disputes that may arise.

Technical and Device Data

When you access hb77 via a web browser or mobile device, our systems automatically log certain technical information: your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, the URL from which you arrived at hb77.bio, and the pages you visited during your session. This data is used for security monitoring, fraud detection, platform optimisation, and analytics.

Communications Data

If you contact our support team via live chat or email, we retain a record of that communication — including the content of messages, timestamps, and the support agent who handled your enquiry — for quality assurance, dispute resolution, and staff training purposes.

hb77 uses the personal data it collects exclusively for the purposes listed below. We apply a strict purpose-limitation principle: data collected for one stated purpose is not repurposed for an unrelated use without your knowledge.

Where hb77 relies on your consent as the legal basis for processing — for example, to send you promotional emails about BPL betting offers, casino bonus events, or seasonal promotions tied to Eid or the T20 World Cup — you may withdraw that consent at any time by contacting support at hb77.bio or by using the unsubscribe option in any promotional email. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.

hb77 does not use your personal data for automated decision-making that produces legal or similarly significant effects on your account, except where such automated processes are used as part of our fraud detection and anti-money laundering systems. Where an automated review flags your account for investigation, a human member of our compliance team will review the flag before any action is taken.

hb77 does not sell, rent, or otherwise commercially transfer your personal data to any third party. However, in order to operate the platform and comply with our legal obligations, we do share limited personal data with the following categories of recipient:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the minimum transaction data necessary to process your deposit or withdrawal. This typically includes your mobile number, the transaction amount in BDT, and a transaction reference number. hb77 does not share your password or full account balance with payment providers.
• Game software providers: Casino game providers such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming receive a pseudonymous player identifier and your in-game stake and balance data. They do not receive your real name, NID, or contact details.
• Identity verification services: Third-party KYC providers may process copies of your identity documents as part of the account verification process. These providers are contractually bound to process your documents solely for the purpose of identity verification on behalf of hb77.
• Analytics and platform infrastructure providers: hb77 uses trusted third-party services for server hosting, content delivery, and platform analytics. These providers process technical and device data on hb77's behalf under strict data processing agreements and may not use the data for their own purposes.
• Law enforcement and regulatory authorities: hb77 will disclose personal data to relevant authorities where required to do so by law, court order, or in response to a lawful request relating to fraud, money laundering, or other criminal investigations. hb77 will not alert you to such disclosures where doing so would prejudice an ongoing investigation.

All third-party service providers who process personal data on behalf of hb77 are required to maintain appropriate technical and organisational security measures and to process data only in accordance with hb77's documented instructions.

hb77.bio uses cookies and similar tracking technologies to provide core platform functionality, improve user experience, and gather anonymised analytics data. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

hb77 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the hb77 platform to function. They maintain your login session, preserve your account preferences, and enable core features such as the bet slip, deposit flow, and game lobby. Without these cookies, the platform cannot operate correctly. No consent is required for strictly necessary cookies.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the hb77 platform — which pages are visited most frequently, how long players spend in the casino lobby, and which BPL or IPL betting markets attract the most interest. This data is used to improve the platform's design and content. These cookies are only set with your consent.
• Functional cookies: These cookies remember your preferences such as your preferred language (English), your most recently used payment method (e.g., bKash or Nagad), and whether you have acknowledged certain notices. They improve the convenience of your experience without being strictly necessary.
• Security cookies: hb77 sets security-related cookies to help detect and prevent fraudulent login attempts, account takeovers, and bot activity. These cookies contribute to the integrity and safety of the platform for all players.

You may configure your browser to refuse all cookies, delete existing cookies, or alert you when a new cookie is set. Please be aware that disabling strictly necessary cookies will impair or prevent your use of the hb77 platform — features such as logging in and making deposits depend on session cookies functioning correctly.

hb77 does not use third-party advertising cookies or behavioural targeting pixels. We do not share cookie-derived data with advertising networks or social media platforms for the purpose of serving targeted advertisements.

hb77 implements a multi-layered data security framework designed to protect your personal information against unauthorised access, accidental loss, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and hb77's servers;
• Encryption of sensitive data fields (such as identity document references and payment account identifiers) at rest in our databases;
• Role-based access controls ensuring that only authorised hb77 personnel with a legitimate operational need can access player personal data;
• Regular security audits and penetration testing of the hb77 platform infrastructure;
• Intrusion detection systems and real-time monitoring for anomalous access patterns;
• Secure, access-controlled data centres with physical security measures including CCTV, biometric access, and 24-hour on-site security.

Despite these measures, no internet-based platform can guarantee absolute security. hb77 encourages all players to use a strong, unique password for their hb77 account and to contact support at hb77.bio immediately if they suspect any unauthorised access to their account.

Data Retention Periods

hb77 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Active account data: Retained for the duration of your account's active status plus 5 years following permanent account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for 7 years from the date of the transaction, as required by applicable financial record-keeping obligations.
• KYC and identity documents: Retained for 5 years from the date of account closure or the date the document was submitted, whichever is later.
• Support communications: Retained for 3 years from the date of the communication.
• Technical / device logs: Retained for 12 months on a rolling basis.
• Anonymised analytics data: May be retained indefinitely as it contains no personal identifiers.

As a player on the hb77 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at support at hb77.bio with the subject line "Data Rights Request" and your registered account username. hb77 will respond to all verifiable requests within 30 days.

• Right of access: You may request a copy of all personal data hb77 holds about you, together with information about how it is processed and with whom it has been shared. hb77 will provide this information in a clear, structured format.
• Right to rectification: If any personal data hb77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your registered address has changed since you opened your account, you may request that the record be updated.
• Right to erasure ("right to be forgotten"): You may request that hb77 delete your personal data. This right is not absolute — hb77 may be legally required to retain certain data (for example, transaction records under anti-money laundering regulations) even after an account is closed. Where erasure is not possible in full, hb77 will explain which data must be retained and why.
• Right to restrict processing: In certain circumstances, you may ask hb77 to restrict the processing of your personal data — for example, while an accuracy dispute is being investigated — without requiring full deletion.
• Right to data portability: You may request a copy of personal data you have provided to hb77 in a structured, machine-readable format (such as CSV), to the extent that this data is processed on the basis of your consent or contractual necessity.
• Right to object: You may object at any time to the processing of your personal data for marketing purposes. You may also object to processing carried out on the basis of hb77's legitimate interests, though hb77 may be able to demonstrate that those interests override your objection in specific circumstances.
• Right to withdraw consent: Where hb77 processes your data on the basis of your consent (such as for promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

The hb77 platform integrates with a number of third-party service providers to deliver games, process payments, verify identities, and operate its infrastructure. While hb77 carefully vets all third-party partners and requires them to maintain appropriate data protection standards, please be aware that each provider operates under its own privacy policy with respect to data it processes on its own behalf.

The principal categories of third-party providers whose services involve some processing of player data are:

• Casino game providers: Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming. These providers receive a pseudonymous player token and game interaction data to deliver game content and calculate outcomes. They do not receive your NID, full name, or contact details.
• Mobile payment providers: bKash, Nagad, Rocket, and Upay process transaction data as independent financial service providers. Each operates under its own privacy policy and terms of service, which we encourage you to review.
• KYC and identity verification providers: Specialist third-party providers who process identity document images solely for the purpose of verifying your age and identity on hb77's behalf.
• Cloud hosting and content delivery providers: hb77's servers are operated via trusted commercial cloud infrastructure providers. These providers process technical data (server logs, performance metrics) as data processors under contractual agreements with hb77.
• Anti-fraud and security providers: Specialist security services that analyse traffic patterns, IP reputation data, and device fingerprints to detect and prevent fraud, account takeover, and bot activity on the hb77 platform.

hb77.bio may contain links to or integrations with services operated by third parties. This Privacy Policy applies solely to data processed by hb77. hb77 is not responsible for the privacy practices of any third-party website or service that is not directly operated by hb77.

hb77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes to the services we offer, or updates required by applicable law or regulatory guidance. The current version of this Privacy Policy is always published at hb77.bio/privacy-policy and carries the effective date shown at the top of the document.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way hb77 processes your personal data — we will notify registered players by email using the address associated with your hb77 account at least 7 days before the updated policy takes effect. Non-material changes, such as corrections to typographical errors or clarifications that do not alter the substance of our data practices, may be applied without advance notice.

Continued use of the hb77 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree to any changes, you should stop using the platform and may request account closure by contacting support at hb77.bio.

Questions or concerns about this Privacy Policy, or about how hb77 handles your personal data, may be directed to our support team at support at hb77.bio. Our team is available 24 hours a day, 7 days a week, and will aim to respond to all privacy-related enquiries within 5 business days.

This Privacy Policy, together with hb77's Terms & Conditions and Responsible Gaming Policy, forms the complete framework governing your use of the hb77 platform and the handling of your personal data. In the event of any conflict between this Privacy Policy and any other hb77 document on matters of data protection, this Privacy Policy shall prevail.