hb77 Privacy Policy — Your Data, Your Rights

1 Introduction

hb77 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every player who registers and uses hb77.onl. This Privacy Policy applies to all personal data collected through the hb77 website, mobile browser interface, customer support channels, and any other touchpoints through which a player interacts with hb77.

By registering an account with hb77 or using any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the hb77 platform.

2 Personal Data We Collect

hb77 collects personal data only to the extent necessary to provide the Platform's services, comply with legal obligations, and protect the integrity of the gaming environment. The following table summarises the categories of personal data we collect and the circumstances in which they are collected.

3 How We Use Your Personal Data

hb77 uses the personal data we collect solely for the purposes set out in this Privacy Policy. We do not use personal data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your explicit consent. The specific purposes for which we process your personal data include the following.

• Account registration and management: to create and maintain your player account, verify your identity, process KYC documentation, and communicate with you about your account.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard and other supported payment methods, and to maintain accurate financial records.
• Legal and regulatory compliance: to fulfil our obligations under applicable anti-money laundering (AML) laws, player protection regulations, and any other legal requirements applicable to the operation of an online gaming platform.
• Fraud prevention and security: to detect, investigate and prevent fraudulent activity, multi-accounting, money laundering, unauthorised access, and other security threats to the Platform and its players.
• Responsible gaming: to monitor gaming activity for signs of problem gambling, to apply responsible gaming tools at the player's request, and to fulfil our obligations in relation to player protection and self-exclusion.
• Platform improvement and analytics: to analyse aggregated, anonymised usage data to improve the performance, design and content of the hb77 Platform. Individual players are not identified in this analysis.

4 Legal Basis for Processing

hb77 processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely for processing are as follows.

• Contractual necessity: processing that is necessary to perform the contract between hb77 and the player — including account creation, payment processing and game provision.
• Legal obligation: processing required to comply with applicable laws and regulations, including AML compliance, KYC verification, and cooperation with law enforcement where legally required.
• Legitimate interests: processing that is necessary for hb77's legitimate interests in operating a secure, fair and sustainable online gaming platform — including fraud detection, security monitoring and platform analytics — where those interests are not overridden by the player's privacy rights.
• Consent: where we rely on consent as the legal basis (for example, for optional marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5 Sharing Your Personal Data

hb77 does not sell personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors and mobile wallet providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard): to process deposits and withdrawals. These providers receive only the data required to complete the transaction.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi and others): to deliver game content and record game outcomes. Game providers receive a player identifier and game session data but not full identity or financial data.
• Regulatory and law enforcement authorities: where hb77 is legally required to disclose personal data to a competent authority — for example, in response to a court order, AML reporting obligation, or a lawful request from a law enforcement agency.
• Professional advisers: lawyers, auditors and compliance consultants retained by hb77, under binding confidentiality obligations, where necessary for the provision of professional services to hb77.

6 Payment Data and Financial Information

hb77 processes financial data — including mobile wallet numbers, transaction amounts and account balances — solely for the purpose of facilitating deposits and withdrawals and maintaining accurate financial records as required by applicable law. hb77 does not store full payment card numbers. Card transactions are handled entirely by PCI-DSS compliant payment processors, and hb77 receives only a transaction confirmation reference.

All financial transaction records are retained for a minimum period of 5 years from the date of the transaction, in accordance with our AML compliance obligations. Players may request a summary of their transaction history at any time by contacting customer support.

7 Cookies and Tracking Technologies

hb77 uses cookies and similar tracking technologies to operate the Platform, maintain session state, and carry out limited analytics. We do not use advertising cookies or serve third-party advertising on the Platform. The cookies used by hb77 fall into the following categories.

• Essential cookies: required for the Platform to function correctly, including session management, login state, and security tokens. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: used to collect aggregated, anonymised data about how players use the Platform, such as pages visited and features used. This data cannot be used to identify individual players and is used solely to improve the Platform.
• Preference cookies: used to remember your language preference and other display settings between sessions. These are optional and may be disabled via your browser settings.

You may control cookies through your mobile browser's settings. Please note that disabling essential cookies will prevent you from logging into your hb77 account and using the Platform's core features. hb77 does not respond to browser-level Do Not Track signals because the Platform does not engage in cross-site behavioural tracking.

8 Data Retention

hb77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Account data is retained for the duration of the active account relationship and for a minimum period of 5 years following account closure, in order to meet our AML compliance and legal recordkeeping obligations. Financial transaction records are retained for a minimum of 5 years from the date of the transaction.

Gaming activity data (bet history, session logs, responsible gaming tool usage) is retained for the duration of the active account and for 5 years post-closure. Technical data such as IP logs and device identifiers is retained for 12 months from the date of collection, unless a longer retention period is required for a specific security or fraud investigation.

9 Your Data Rights

As a player on the hb77 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered mobile number and a description of your request. hb77 will respond to all data rights requests within 30 days.

• Right of access: you may request a copy of the personal data hb77 holds about you, along with information about the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right to rectification: if any personal data hb77 holds about you is inaccurate or incomplete, you may request that it be corrected or completed. For account details such as your mobile number, you may update these directly from your account settings.
• Right to erasure: you may request that hb77 delete your personal data. This right is subject to our legal and regulatory retention obligations — for example, we are required to retain financial records for a minimum of 5 years and cannot delete them on request during that period.
• Right to restriction of processing: in certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that hb77 restrict the processing of your personal data to storage only.
• Right to object: where hb77 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. hb77 will consider your objection and cease processing unless we have compelling legitimate grounds that override your interests, rights and freedoms.

10 Data Security

hb77 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, secure server infrastructure with access controls, regular security audits and vulnerability assessments, and strict internal data access policies that limit access to personal data to authorised personnel only.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, hb77 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach. Players are encouraged to use a strong, unique password for their hb77 account and to contact support immediately if they suspect unauthorised access.

11 Children's Privacy

The hb77 Platform is strictly intended for adults aged 21 and above. hb77 does not knowingly collect personal data from individuals under the age of 21. If hb77 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately, the associated account will be suspended, and the matter will be reviewed in accordance with our age verification and responsible gaming procedures.

12 Third-Party Links

The hb77 Platform does not contain links to external third-party websites. All navigation on hb77.onl stays within the hb77 site. hb77 is not responsible for the privacy practices of any third-party service providers (such as payment processors or game providers) who operate under their own separate privacy policies. Players are encouraged to review the privacy policies of payment providers such as bKash, Nagad and Rocket directly on those providers' platforms.

13 Changes to This Privacy Policy

hb77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform functionality. Where a material change is made to this Privacy Policy, hb77 will notify registered players by email to their registered address at least 7 days before the updated policy takes effect.

Your continued use of the hb77 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. The current version of this Privacy Policy, along with its effective date, is always available on this page at hb77.onl/privacy-policy.

14 Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or hb77's handling of your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related enquiries within 24 hours.